{"type": "bundle", "id": "bundle--46a52771-a4fd-4f54-a298-00c687edb7e7", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--515439dd-4390-44cf-bb3e-29405b2d70bc", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--f575e0a3-611a-4526-9a98-fe1d93231818", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--997805ed-5b3d-45d5-8657-fc968cbf9699", "name": "Vultr Paris", "latitude": 48.8566, "longitude": 2.3522, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "FR"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--d00e252b-9290-4b5f-b4dc-3f3a0e3280da", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--51e2a635-89ca-4c6d-b36b-6c2f7458b093", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd27069a-027a-4d71-b90b-1856a8bae8f8", "relationship_type": "located-at", "source_ref": "infrastructure--51e2a635-89ca-4c6d-b36b-6c2f7458b093", "target_ref": "location--515439dd-4390-44cf-bb3e-29405b2d70bc", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--93b1a959-2b3e-48f3-bb50-62de543106b1", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fe3afcb7-e974-4cfa-b273-89e8419b323c", "relationship_type": "located-at", "source_ref": "infrastructure--93b1a959-2b3e-48f3-bb50-62de543106b1", "target_ref": "location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--08592dcb-c533-40fd-875a-85e3dced9abb", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--09812aa8-7061-436b-a9be-86d76c521ada", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ca81f28d-3190-48f5-8884-99f4beb0a326", "relationship_type": "located-at", "source_ref": "infrastructure--09812aa8-7061-436b-a9be-86d76c521ada", "target_ref": "location--f575e0a3-611a-4526-9a98-fe1d93231818", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--b1597aef-fdc9-4d33-bf5d-36ca3c5d31ed", "name": "Vultr Paris", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b30c9e3f-e8aa-43cf-b493-f3c90cf85a46", "relationship_type": "located-at", "source_ref": "infrastructure--b1597aef-fdc9-4d33-bf5d-36ca3c5d31ed", "target_ref": "location--997805ed-5b3d-45d5-8657-fc968cbf9699", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--d3572596-05e0-4bbe-a5c2-7844e00d9a39", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--e8b09de5-07fd-41b5-a7a0-781491653bdb", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--60b8a746-e0f0-4c7b-90b5-462d6274f3a3", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--43478ffa-ebdf-4d2b-8127-38e7432e863f", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7d0ca0-71e0-49ba-9d27-5b34dada1a37", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '/>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693cc838-26e8-463b-af45-411ef79686bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.12.70.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d6f73b-f2f9-40e7-8e2c-15c45cab95b8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.14.206.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ea82bc-0de7-48b7-b6f7-728e9da78f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.197.102.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bb1142-ed07-4e66-b87a-bee9c35a06ea", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.214.214.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e14cd6e0-1f1b-4204-9e84-7d5d60ddb269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f8b09f-1fdf-478f-b7ef-ef06b7ca6d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc3a98f-71df-400c-946c-918bc12c695b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca71917d-c190-4306-b567-bb37a42bd55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9732be67-d0c3-49b4-9b64-647172d5588a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5efd38bf-b7e2-4b03-8c2a-859f3e659582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7030b7-399a-42ef-ba8d-ba4ca00b32b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c3cc9a-1e86-448a-bf55-b7ac0287ac81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b02ce46-160c-47e1-ace9-0c681099a0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3e6aeb-7fe3-4f1c-ab19-fc82cf3b2bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9638485-b5bb-4105-8b5d-04123d65cf6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291dab88-4004-4028-b19c-5f29d846ab90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f79d070-da56-46f1-b0b4-6000c97a1047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8a44e2-7333-442f-b481-642cda9da983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4a8302-9f46-432a-a978-e63c4b6d0d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e131b0f-eb79-4da6-91ee-ec4e950ff200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f60326-7009-4f2a-ba1c-ac0ad17a791b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3031ee3c-5bf8-49e0-87f2-090a1def00ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cf25bb-bb49-41a9-b4df-b21652416bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56428b8-4101-4a4a-a059-0abab4b6346e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1efa1a0-628f-4fad-aef2-835c2fbca333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb10fd53-0ad6-4b3a-92bc-2e608099b794", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.179.0']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f70d30-189e-4b56-806d-8a783e52ba48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.30.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07890938-9c5b-4d61-bba5-338c37c1bae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.104.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b4f824-1d75-42a2-9183-f11713c02aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.255.32.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9956a581-f1a5-4bfa-9871-324eb588a704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7bd323-e847-4c46-b7fa-22e25c224fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47a97e7-c50e-4cf8-afa5-512518951e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37ff0555-1b5c-4d8c-9f4c-c1873bb6307f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a516662d-e649-4bd4-b3d6-831407b32727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d0d309-a20e-40e7-8e8d-61a7fe189c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e918b40c-9895-4394-aa16-22eddf82198b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00fcedc-363e-464f-b021-805025000586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a668775-745c-4f0b-a9a9-37476a692a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cafe550-1e1d-4d79-897e-88ec7badb99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b81c0e-601c-440e-87f3-bd7e2dcb9395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbcecb8-efb0-4d39-b9c3-16e3fc98c8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bcf91d-f141-47ee-8472-b19b77d0d734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45971cc-f1f9-4b4c-84ff-ff342b6a94fd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.122.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6364d92e-9648-4765-b6ac-93f8e7886cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e8da6a4-357e-483d-b8af-93efc8271bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec113ab-c3e6-45d5-9f8d-f5f3d1f077de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348edccf-cd91-4a15-91ed-727f73934e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0747ae79-a3fc-4e13-8a12-5c6b5cac873c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d55356a-c7dd-46d6-b17c-8c2fa2b9e8d7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.159.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32a7b5b-d17f-4ed1-bf6e-6b89d8758d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.69.66.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27678fbd-c767-45ea-b476-12da18c18985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.71.208.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb818b8-8b8d-4caf-af06-404e8c66736c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.192.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaa87a7-1f4c-4e79-9ab8-397be844acc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.225.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38c6e3a-cfa9-466f-a2af-33964d747143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.0.15.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d926c4be-9045-44f9-acf9-59e0a21aed1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.186.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86e77b0-8e50-4573-b915-3a546500bc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8001c904-650b-4715-9261-d6340e66fce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.141.40.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520e8c22-1ecc-47b0-9332-ab5977532ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.182.109.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dea08ea-2ab2-4164-9496-05a27f2e2c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.182.248.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9228558a-4352-4606-ad58-500eb273b53b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.188.122.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3906edf-e207-477d-b53f-b4d68846fbef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.211.152.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d097f7-d31e-4809-a3bc-3b1f2c226d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.216.134.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d24524f-3958-4c8c-98ef-b93d5d7f0c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.217.176.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8954812-1e8b-4475-9663-6523604aecd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.223.47.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feee91b4-e48b-4a8a-8726-f55987ea104b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.67.141.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0ec60c-e5fc-4fce-b1b7-f5d39f1a3142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.69.167.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531b777c-1dc0-46e7-9525-c0c04a52ce63", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.137.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac7b67a-9244-4d37-aaf4-8ad08573a560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb32fe2-fa8b-464a-9895-d0fdb4b72874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.89.47.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae51bc4-e2cd-45ce-8b74-30d70d6644ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c30a2c0-2023-4e6d-b364-931b30798123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.112.62.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605948a7-9199-4409-a511-b8c22c20e1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc47891-7469-4d20-bee8-c1458b099754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.124.153.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0b7948-7f9f-4c5b-8cb8-538d771ea012", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.125.103.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05716554-f3bc-41b7-a9ec-21ebea8b5074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.126.4.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bda572-ba26-458e-b6c5-3a0a3441780c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0f2b05-0b94-48e5-b6a3-79ffe35b0d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eea75da-8df8-4223-bd44-f6d109bded30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04eea29-9272-4a57-afcf-da3bed9266bc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.151.140.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee00ad3-0011-4948-bc90-a3b9da12245f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.241.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d200aa-cb98-46fb-bb1b-24a03f7a1d2f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.241.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1033a7f4-ca7a-490e-acb1-36a22f234711", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.29.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7edaba-7126-4c21-bdc8-1b87a91d52a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.158.40.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7171d5-0ff9-4cb6-bd24-62eccf483c1f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.168.66.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41cbc18-2109-4406-a824-be9e2f408848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.7.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2448f095-b08f-4676-a216-3360e5ab00b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.49.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f011246-88ea-4d3e-a2bb-86c583b0096a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.235.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd41c6c-47b2-4ce4-a1da-86c03fa31c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59f0fb9-52b9-4a24-adb3-68950de636b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faada3db-e562-4c89-8e5a-8bb30ecae334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3db32e3-7be0-48de-93c7-f876fa0e3934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e01e1bc-e84a-4005-828d-4336533bfe62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e74091-5a70-48c6-8f1f-701b6c5b3768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6aa2567-d1bd-426b-a7a0-466ab9da9bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.210.22.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e881090b-3ac9-491e-ad8f-d86cbf39aa22", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.211.160.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc21a9e-ee40-4aa4-ae6b-2e063f321cb1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.5.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b40c014-d711-4367-bcf9-4c443214ec3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.242.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--348d454c-28cb-4b17-8c67-71944641fd8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.74.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64074730-23aa-4c3c-a3bc-3be36eedcca3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.74.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994a3056-483f-4f94-8bf9-5a13e52d5fa9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.74.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad62c871-39a1-4b23-8017-20dc98f7a707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.231.188.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e7ffc9-f255-4fb7-9a58-984d1228fcbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8caf52e-858a-4549-8b09-e502f064eaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28786f5-01b8-4e8a-9bc8-2f6e7c9f7c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49ef5ec-4d79-41ef-b665-1c3ee1658930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d610f0b-b39a-4fff-a6e6-2ce664c97139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f312c3f7-0d77-4be4-9a89-59e3998c2b22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6447d3-87c8-44af-9628-35a088ee583a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f770aeeb-d09c-4654-8224-9cbf78850bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639c6618-4456-4978-84b9-0b860d2fbd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f38558-6a6a-4192-b84e-19f3f45e0694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.243.228.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feb1bc7-d7bc-460d-9c84-e1cb2049a375", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.120.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0610ad1b-b784-450f-a6b6-fe06862bd5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.86.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43beab9f-9cb9-4d25-b606-e2ff8d2e537a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.57.248.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6296901f-fb76-49fe-8dde-25bc66c97ae5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.61.44.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3f5a55-80eb-45af-8900-6f8a37233cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.7.11.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73234ea5-6286-45a4-811b-7d693d794321", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.71.190.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489d3973-50b5-4029-99e7-a74658e2c5fb", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.180.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78591a6-d305-4783-980d-3c3b3298850a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd43b280-7314-4b42-9dd3-d21dcd7933b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.71.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab092f0-eee2-4693-be63-642666fd6611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.76.109.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76f9b3e-5e19-4984-b8e9-42db888d72c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.81.87.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63f2f20-3410-4a70-82b3-64bde21348ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.83.189.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dbd592a-8faf-4cd4-b6d7-b02302d4d7d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb3babc-e310-4011-8f2c-d1aa35c20c00", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f8f067-9542-4823-9112-1344aefc2821", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2574a8b-cd73-464b-bbb7-580febbbecd0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4db500-6d1e-4ea0-a8f3-f2b2049042f2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7c8065-25da-4d45-8d5e-b46722324835", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a38c02-d156-4b4e-8f83-faa3b58dbe9c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa71c84-c1fa-4978-b2db-133c6a57b370", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99f7778-3a9e-402a-8046-da402a8b20e5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae61571c-82c7-4d68-8aac-2f83e7ffa9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4b362c-bb4c-47d4-943f-ae3b4e0878ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.64.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9175f334-bbcc-485d-9a68-931f3468cafe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.168.93.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99aef7ea-1a36-4e06-b965-b644582eccd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.192.2.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6521f1f-8b72-4f1e-a1c4-2613eb32eb61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.9.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c01826a-73b7-41a4-a839-6728fbc276ee", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.198.141.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--533afb34-6591-4224-b726-21e650519a1e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.208.108.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d15b7b-b25b-4a1e-ad76-3bcef9900250", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0245507-223a-44e9-b6a5-3db8a2b7cd22", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.225.143.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdaeb0ef-4a95-4ac9-9dd0-93903e5ddd5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82081489-18a8-4957-bf8a-06ea59fdf897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.201.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68bf770f-e328-410e-a2d1-0dc27ca568d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fbd5ce-b7b9-4062-bbe6-910c4e8a300d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.238.110.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af9bd24-08d1-4e30-a80f-a79acb664ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c11a37-b135-4a63-aa1d-a5f7f478e668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faae2f3f-3511-428a-9595-b296e9faf310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc313af-4b08-4df0-94b6-9f45afc51a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb842fc-dd3d-4d07-ba8b-9492faf83581", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.28.255']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d0e93c-858b-45eb-9a86-e070fcd2a58e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa3ff8f-f6cb-4b32-bada-8b9a833c137f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.195.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9532d4b-c0e9-4990-891d-a396b0637bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.172.0.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3648673-cee9-4944-b032-78647d799e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.107.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98a2904-20fd-4a03-8813-ed18e397b724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.115.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1316c7c8-e52b-4a7b-9ab5-b310d7223da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.107.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9c87fa-6d4f-4f0a-b7e4-9d671c8c1e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.239.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bb9c8c-8e99-4e1d-8021-117758141ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.46.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bf2ad9-24ee-4293-9a99-bb1ecfd93cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.85.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c582632-2bbe-41ea-beff-a1064ab41517", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.51.92.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff610c8b-12fb-4e95-8447-a055a87e5e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.53.97.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39345707-5c97-4c46-87ce-b4ca8b180b2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.62.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bdde2e-3f99-4b14-886a-f72afe2cc57f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e4c6bf-3dce-496c-858f-63e1a7f2705e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.63.26.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f276a7-1d87-4e40-8a5f-0761651d8e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e070321-2e0a-48a7-aab1-a81020488bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.141.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05640dcc-a350-479d-b007-0a8d072759e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef6ce9e-a2d5-45a1-b65a-85655c181bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4cc094-248b-4a6f-9525-19e187f7f3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40967fda-c9e3-4b9e-b9b9-d6f38fc70fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51b24cb-b02d-4cd6-97ba-2c4b7b791986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e78beca-cb3c-4247-b2f2-81d611b9a8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.154.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584a0043-1d47-4954-bf36-909f793b93cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.166.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9202462e-2886-4dfb-a357-69acdaf83561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b887f1-9e0c-4ade-bf2d-f960ac36f2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca7742c9-4b31-4b04-9ccb-c00724b62add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0731554a-8000-4f6e-8256-9c6d19138592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea813be-bff2-42e3-9d12-6aecbbbd1763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6f59b4-cd4a-4d91-a877-2f2034ec3ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd6a23bc-b35c-45fd-9634-ab97c8b97832", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bc2f97-e79f-4c2d-beee-da7ec546b9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21ffe79-03de-4d38-bff8-82a72c072712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebd6693-b3cf-487a-ac26-86657631d215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dd50f06-0fd7-49c3-923b-3d3f38b79a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f63769-3938-40b3-9b24-7d06ffe5a096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e7668d-fba0-47b5-ab2f-0a9899faba98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e588d9-8166-42ad-b49d-8abaccce4e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a226c9-45ba-4eaa-8c62-28c88827c6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1b5d3a-a02b-422f-8d3c-831445432b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fdb7ce-8497-46fa-8680-b04ee6ac60f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.110.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cdddce-4241-4519-8eaa-7c4654a00cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a1f92f-6829-41f8-a640-41a87aa1b754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb838c88-7599-482c-ba5d-2c4233469d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321fc2e5-7934-4cb9-97ca-6e1a1acdd3cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e33959-3001-463c-ac61-87a26668de18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbaff342-4935-464f-924a-deeb8d269c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2e2356-62d5-45fb-b5a5-4425f7787b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f55bb9-4a4d-4b85-89ff-b144bc8ebdec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721c44f9-7c66-462b-a315-51b18988c59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a567ccc4-779e-4d91-8d6d-599dcf7e2aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0a6ebeb-f1eb-4685-9af1-fb7cd8d720d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.55.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a70e476-aaaa-4161-b1ee-25dbdf9b1d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30201e62-a64e-4b7d-952c-92d89c17257c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.50.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6cd94c-7a01-4cae-b615-4336238c6b4b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.174.137.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7711d7d9-8691-4c54-a4d2-863b320e36a6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.24.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a708d5b5-77b5-4655-a4f8-8b390887df25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.6.182.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032e1f1d-c2a6-49db-8c6d-bd67c49fea27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.179.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3800a56-8da0-49d0-baa6-4af7b16d838a", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.176.102.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92ba4ef-47dc-4187-ac89-7e5b22314704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.7.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f563fe-b33a-4f3a-abb4-cb894d005824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844e1868-1334-4651-b7ae-772334522bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e14ad92-6ca5-481e-8487-6dd3f1dfb46b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d797bc8d-9085-47b4-8e39-18907e8f2be1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f086fd-3b70-4d7e-b44f-3ae5fef7b785", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91aa60c5-b772-40d3-b281-4a992ab57cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f041d28-7b64-4b49-8507-a749b51fd630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b86477f-668b-4d9b-938e-1ce9858d37e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4635d8-c117-4e52-b437-abfdcd3e1896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e49472-64b2-44cf-b37c-8f633f32555b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03bfec4-dafa-4d77-8767-677918fb1a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.130.38.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16502c86-6a3e-40e8-b547-27440eb38f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.224.1.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20f7151-f9a2-479a-97e6-9f786a70d611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.227.135.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae79d9e-363d-460e-95cb-ff69a50c9994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890f5fef-09ea-4bd8-a865-7c00853039e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.49.184.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734a0429-176e-4afe-8e0e-45c200eecc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.91.4.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d1f0c4-34a3-41d2-b3a3-9f2b70e1fe87", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561fdcb8-5d4c-4648-bc1d-59e9409628be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.136.190.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e2d214-ffda-4d46-a486-c74f83d004dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.164.64.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d8893b-9643-4e96-b3f9-d792a7853f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.183.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7ff473-dd37-4018-81b8-d0ebf19ac387", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.246.87.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f988c9a9-0852-4213-83a4-6d17af49b639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.46.243.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2dfbc09-daa8-4513-ac99-0705099af184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.46.49.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e303266a-32ae-45ea-9445-0ec66cbf27d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.83.4.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413301c1-0786-454a-a78a-e4c855e4a4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.83.4.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b331edf1-ae2f-4236-90be-c5463ebc3c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35c4348-e789-4f49-9678-63408614afe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a70917-45ba-4ed4-8d92-fb7895239802", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.14.169.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e4c99f-7922-4a7f-b8bd-fff7cdcdd29d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.229.21.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f906df88-64a1-4c23-b220-7f91e48f7d5a", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.61.169.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8168eb-fd49-4cd9-a108-9aac4c2f207a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.77.115.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ca37c5-3dcf-4c6e-969f-f35215a3bf2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.166.31.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2207a4e8-7a3b-4630-bac1-5544e453f7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.217.188.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e14351-3cf0-4331-99ce-522184b8b177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.212.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed2f63d-d598-4ade-aa90-45c8f01400fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.213.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29abe3b1-f781-486d-a465-e7559ce7be31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.214.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56580ebf-d3b7-47bf-aed4-1217086b5599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.51.27.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4c19e8-db00-439d-98f6-8c0aa6df2192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.78.1.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8df949-d38e-4c14-ba72-69478060ac21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.95.232.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25536832-839b-428f-af4f-05efb75dee1f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.10.154.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a433440-8ea2-497e-9976-054a9b9227a3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.161.39.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffee445-5daf-45c7-8c64-c3c60eb69562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.172.113.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55247861-65cc-4e9b-8ca1-0fef2831f270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.172.40.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb9eddf-6f12-43fa-983b-1e5103f9b5d1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.22.105.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287bd8ab-fc64-42c0-920f-1efb887d6c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.249.110.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2dbd5d-9259-4cbb-8429-a4f34ee216a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14b0485-4baf-4f00-8e1f-30a1d2967a74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.132.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18766027-6264-44c9-bc93-1845889f877b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acd23a9-04b9-4b1d-9a17-42f0fd4eb8e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.135.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c10ee55-9a8e-435b-9c4d-35666bff688f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1623f6ed-7e3f-49f0-a08e-a43523dd2b7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4d3a70-6ea2-4cd6-8836-1b7db402b6cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fff289b-5f72-49d8-94ae-6c1cb56e94c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d9fa15-75ed-40ce-a80c-f7dc6de777cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88641e81-b6a9-4488-8e95-cd85c2116e1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf7fa9d-bc6e-4626-9a40-6ba6c1d2f5c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17cc646a-d614-43ee-b80b-fe69009eddbe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f87df98-89ea-47d9-9101-0d36404ebfcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--749353b7-5828-476a-8fec-9c5309569692", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6049044b-77da-43a6-9e1c-a3f6d1a7699e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.141.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b4a83f-8eec-4942-a21d-437aca9215c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6735e5-6b49-4621-befe-ea1ba12e57dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4109b295-a5b3-43a5-a344-9037dc617e4e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2954e6-c7c2-4b63-ba03-0cb754e41b7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d19f20-01c7-4c44-a921-9a53b424e16d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1198a308-bcd4-4e22-9f23-b39e120669ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.144.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9e2cd8-8ec6-4cdb-9539-cc5cf3220e27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.144.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab9351d-5752-48f5-adfc-8e41ae575d28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.144.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a3b782-dec0-4e3c-a31b-6f2b23a194d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c4b72f-453c-4b77-925d-3b4b7388eeb1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb26c89-a45f-41d1-bd56-26e8c273d156", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.147.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0278039-1bf6-41df-9c38-13b1d97d3456", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.149.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780532fd-c0c0-4b97-b11e-f3f127e23920", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75d2cdb-430f-4ed0-8b99-5df489fa5bf2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba0ed39-d5f0-44be-a752-5b64be00483e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c81c030-f7de-4a4f-8f14-b475ddc0a863", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ad2c75-f7d6-4594-a94b-ba6e2ee23cd5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0756a99-c454-421f-9a24-0e00cb057bc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68488c5d-12e0-4f9d-b179-32ac02b97883", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c39510c-117e-461c-9641-c01054d43796", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad848617-c5f5-4dd0-a592-066f5cacd1b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2256e7-a053-45a4-855d-66a05b8d09c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12ec3a1-b0cd-4323-83c3-78a63895dedd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7649b5-9b38-433c-912f-d57941d3c352", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16abc784-979b-4f35-af58-766abb9f2140", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07618120-bf26-41f7-bc04-104f2fd505f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cf2830-a71b-4ba6-8ea4-0a26ef65ed77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8fe903-7271-4394-8e35-9cdc429f6d64", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.157.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a85b42-210d-4ccd-83ca-0b25edcaf935", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d23de10-17be-4227-8c8b-a4824f1463e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.158.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--781d69f9-b188-4455-9101-dcd9c9da0d96", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd12055c-b994-4d57-a272-041f52cfcf58", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91743e48-26fe-4ebe-be00-fa15a4aa7a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.216.2.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6bd9e4-ed40-4340-a4c8-65da0700c813", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.217.21.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c41e83d-2c9e-44da-b800-01bd10042ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.237.171.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21ef9b3-bb19-4447-8020-9ef60e0c90ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.243.134.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e738ef6d-3231-44f3-8f03-a10e3e9ca1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.33.80.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6583e535-5598-4fd3-906c-6cb93c5e37ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.124.73.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38dc59e-7b76-4494-bb8a-c9dc7b5bb428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.162.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810289f3-584d-4214-bcaa-3e80839e5e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.181.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909b0174-124e-46dc-86eb-f84091af2b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.209.116.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662d7bd1-d84c-487c-aacc-dde7c4465da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.209.172.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56bcaa0-f6d8-4636-8a70-36e9a39ee97c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.211.151.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af12bd11-c265-46c7-8918-5741441c4952", "name": "Malicious Host", "description": "Observed: REDIS, SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11384873-5324-4a3d-b02e-6027e9d7213c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.68.226.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422587fb-1379-417d-a96e-ce637ba7d5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.96.27.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--925e760b-1def-4b24-94d6-4fc012111759", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.150.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1770a9-142e-4b01-aabf-02f55bdcde00", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.218.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0a613c-3247-4fee-8ef9-6d4d69c8cda8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cca7a29-820d-424e-9190-87a64b0ede30", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909592d3-e19d-42cf-a562-5ce458430833", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab9f0d1-ced2-43aa-a5a8-1ad0c44b2a39", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.28.41.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ea37b9-3ac5-4119-b866-745d46e1c89b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.175.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c9a31c-67fd-4159-8152-f76896f03f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.49.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03277900-5e99-4eeb-b7fb-1b261009baf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.102.4.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe055f9-1430-453b-b96a-d00efcac8b4d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.164.191.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1a4179-fb8b-4f34-86c5-a70405741596", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.191.91.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164f1793-48e0-4a62-b8d1-b7471773be36", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.216.111.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23df3fb5-4297-47e0-bb30-6972627fb0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.24.13.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e30b81-443d-4a0b-9abb-c159d9d9dae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.250.29.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0950689-ddfb-442d-baeb-b1572a444c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.127.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ba9027-2b10-4b9b-bf1a-1600e45be2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.213.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da5e211-866e-4703-9cf9-589a0e65d79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.72.121.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64581d6-b73d-48c9-ad0e-8200199c0647", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.234.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16991502-3321-464b-92c1-6dd036af9136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.85.109.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c08909ce-6636-482d-82ee-b6578154fd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.100.118.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f34e0df-aa14-4232-b948-37b7abb192e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432f7507-7e2d-4364-b1ad-e00b3daf9a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a585435-0174-471c-8df4-1d92f315d9e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8f6365-8cd4-4ac8-a8bf-c1ada5d8930f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f584a49-51d3-4377-aca3-ed45cfeb0df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb1b601-ba0e-4fe6-9eb2-57fc7489cda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.39.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d92be87-6a09-4df8-9810-4ca38452b25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24699949-2d68-482c-85ac-b2869d00b8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.43.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a041d4-e983-4bfb-b391-e603f8da2760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bf3011-9939-415e-8cbd-288cf8c59eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a466c230-2f94-473a-b28d-fe5ae53baa13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838a9dde-fa18-4b50-8ca3-85a2f81ce821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec658b78-9d91-4316-a53c-bbfb5f20738d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833bbfcd-94b3-4849-bd38-6ac26bcf1b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2a5f83-2869-4512-b667-7aaa5a6d59a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197d95c5-3a84-4012-a942-869e0aaad0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6ea664-9cc9-491d-b091-944d47cee618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b305330d-9336-4325-9b5f-9020fd3e19a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c4d45f-1214-4f1b-ab78-a469704e6412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8099bcde-ec6a-4e27-bf4a-2ab6932dab8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ffa3f9-5c8b-4241-a874-11fd7e15ff36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12daaebe-920d-40ff-8f8c-fbe9d402cbf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6feb81-ea0d-4e09-8838-8d15b66b8256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.68.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab81f793-9525-4fed-b00f-11bdf07d4cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c829921f-5543-4ee6-ba32-81cb0f7106d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6481b851-a25f-4bb7-a4cd-0baf2903d262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9aff76a-2c79-4ac9-8a2c-22b38a1454d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6596612f-7b58-4cfd-b9d8-f7a44db66906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dafb1b-8b72-4ed0-9502-8e19572c8873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2be1483-a3ce-475b-9f15-c1f8d93c73e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040782a3-8051-4d7b-a86d-cc0c4d515762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b98a15-cee4-48e6-8a2c-388d3c3358fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f526fb-85e0-4a8b-81d9-f563b4ee5b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f2bd38-ac4b-43a3-80c8-394e811b95f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1dde37-1ca5-40d7-8080-602f00eff296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891959d3-21b8-4ae3-b5eb-f965f75efc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6415fda8-1e76-4b6c-a00b-98b3f65f42b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46014b42-de4b-4edb-9f4f-b8ab10e66ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.51.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8341216b-9f55-4f8b-92e9-54521f7b1608", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.86.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb5f278-31bc-42da-b5b2-54d20b2f09f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.120.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dde8baa-012d-46dd-953c-ad22d6e520bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.122.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e5a7a8-6ff6-4596-9a72-4c162fa9fefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe865c8-9354-4d02-b607-ee7609ce3230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f23fae5-52ec-4556-9704-596697ca896d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c230056c-f413-4c4a-850c-fb6ab0cb1611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58cd8b11-2860-4b7a-982a-3b89a8cc35ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49be39fd-ffb3-4adc-8479-185850704455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95406d21-f247-40ac-aadb-9791509fd05c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8960a23d-1573-4700-a090-329828e7a6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.39.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--631226db-c07d-4519-b210-2e3f55fe8f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1eed788-d9aa-405b-80c5-f0d627b8e3f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.70.181.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828e35a7-ca15-40c5-9b78-df828c9a8808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.18.2.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e438203-f4e6-4efb-986b-d8e76ed67249", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.18.55.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3565f94d-1c25-48be-8565-bcb84f922e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.205.179.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfe8b49-036e-4173-a359-b51468400a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.28.107.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412ff1d3-9b84-41c2-8308-2e5591eb4567", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.156.67.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9767adb9-437f-48ab-8f17-2ecb78a01ab6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.138.5.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8360b438-2d91-4f30-a2bd-b169232afacb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.79.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517a587c-9dc8-419b-8d72-b4c8b5e6bf1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.25.235.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c88c0b-6ac9-4693-bfad-c7fe5ad303a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.63.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af94d16d-8e8b-42c2-a10a-81a64b0ba5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.112.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569ca587-5bc0-439c-8382-d73ef89ecf1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.11.116.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6eabcc-9a45-4b12-b5af-a517e5687d0c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.153.60.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--378195a2-8faf-4fb3-a5a4-3c336b1e21e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.165.84.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--666f2146-5a11-4339-b727-4eb8336d06f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.171.125.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53f323b-7848-4644-b608-3fe0d77caf00", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.229.9.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e67ff9c6-5e09-4284-b2ec-a9cd05293823", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.4.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eede27af-2c5d-43df-b781-e14840fb9cf5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.40.103.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dbe88b-3bd0-4249-9415-cfe32a509031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.55.222.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25569cf9-7259-4a49-8871-f06a8cc08d96", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.10.115.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076752c6-4610-4580-82aa-b3bc6adabf4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.180.145.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1959d5-b540-427a-a8d8-be5f5ea66815", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.247.114.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--406da547-57ed-4695-b9ad-8bca38192409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.53.53.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c39c68-2557-4893-99e4-c509f21a18f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.14.125.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ecba3f-5391-43fc-af7e-daef57c9e483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.180.182.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0965c4d5-596b-482c-b735-84424bfc06ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.204.25.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147946fe-d164-44a9-a50b-a80f5287c511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.5.142.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f87540-30dd-49ca-8869-61701262bd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116f4faf-650d-462e-ad35-03f12d2124ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e092c71-78b7-4f73-ba2e-a2be222ca1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531e5c18-2bea-4607-8143-b914c7b59161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321362d2-080a-4b25-accb-d65c2d7004a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a26bc34-8e05-47ac-9409-54ffefcf8662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.209.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23644a5-85c2-402e-a8e6-3b9718295448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15b1609-8b02-4a36-9c04-55c1772d52ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54de06df-326c-4e8f-a4f8-14545d2137be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.106.193.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3b4f1d-8248-4ea9-9be8-4671bf399506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.193.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e4275d-3428-40c8-9462-05186f1f552e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.117.193.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4259afd7-00ea-4fac-bc88-5767041d4fa9", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.128.247.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b64952-8edc-4504-a6c2-e02b802063b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d0e775-88c5-475c-bda7-4caed47edc65", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.223.143.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d561e6df-920a-41a0-81ab-37152d7ded84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.227.31.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10756e0e-5785-42de-9de6-393b3f27ff9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.253.77.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627f07ac-67e9-4267-af85-ab9bd49e1451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.194.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151447b9-cfde-4e28-951d-d2569884f166", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.135.130.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121e00e8-e390-4911-83e9-b6f750b3ea37", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.166.76.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427fd4d9-54e7-4d17-92f1-2ad82c1ba92e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.20.210.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e624e1a-9490-4745-861a-9f95ff5df51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.25.48.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424c8ba4-3f00-48a1-af11-0813494ad257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.77.133.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac1ce9b-7dea-4af2-b733-7795b8964ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f6a83b-38ca-4b49-a6b7-fe3bf97e5438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f311e85d-e41b-4df6-905b-b7c89a9ed611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86856abe-7078-4274-b8f0-1e4966e68a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.44.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ddf2e07-90a6-4795-8e05-30d4eb87217c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ac2d76-ef0e-47f8-9fa7-4161e5b20447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a77ae4e-db55-4f9a-81ca-01750eee0881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd82a98-f17f-4a57-972f-0a03ba2edb12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef7430e-b71f-47f8-b1f7-e72d14d873ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb9d8b9e-4f4c-4e55-8976-e7bffd55b452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dd7389-5ba3-44f5-96a6-a1ccc47e9601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f334feb4-bbe6-4a69-a736-efca6c32cdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22143681-7a48-48b2-acfc-b129f795c8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a417f71e-e9a2-4c0d-8a82-bf0015209286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.200.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7623acfb-5980-42a7-b9d8-0a9412f70742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.201.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47760b9d-37b4-47e4-80ee-46fa42d0922b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.241.231.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3348b713-275b-46e6-bffe-3adbaf8212ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.8.124.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05bb940e-cf4b-4943-ac32-95746afb5f30", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.121.52.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df254898-2c29-4383-b76f-839528527f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.64.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9eb00c-8c94-408d-a1c9-cdb272fc5099", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.146.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4f4c7d-38a0-48b0-b9da-c100c44f5728", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.193.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2853de1b-3e00-4b13-84d5-6cb1f4a54506", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.211.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677ee892-ec5c-4617-9f26-d15d39bea615", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.212.116.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5b2c577-61dd-4ad7-99a8-0c48bd9ec551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.82.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc32da4-2eaa-4e41-9d35-eaa81601fee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.104.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bc300c-192f-441a-9065-adc0a91ff282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.113.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdf2dc3-ab3c-49d2-8d1f-227b27db1343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f098e70-726d-4db6-af7b-544b65a430d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.115.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34677c5-1185-4957-bde0-f3d94b0de434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e462c3c9-92cb-4e58-8deb-3d98f7b06ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.116.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d255d1cb-f7c3-485e-9e16-512dce14af2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e87412-8e24-47d1-acef-19a91a687235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c41581e8-2568-4bad-bc75-44893e35e570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78098756-c6cf-4806-a7e3-3fce1bc5f0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d6d7f1-7bab-42e6-9e47-7f3435b43b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decc5551-e417-40a1-ade6-71339b5eec43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a01c7b-4631-4734-a2ef-515e95739501", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.90.206.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df439737-ed63-4629-9a0e-e0c4580e26fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65c9232-389c-40ef-9d82-1859bf5e731a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9c90eb-ce87-462f-8053-68a73b18eaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d68d6e-b195-4d00-9cd1-b03bae397842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e26425e-ef99-4faf-a6a7-4d2a167e25fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff43424-a3c6-41e3-a2e3-0e45bde6d8fb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.162.177.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e787d9f-a00d-4577-bb1c-2b9119b9ebd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.159.24.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a81144-040d-4cce-8e88-dda92c3ecea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.175.179.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5541d81c-95af-418e-ae9a-94030bcc377e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350f3d35-050b-4664-8e63-f39d76b3ece2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.19.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc782bd-cdd5-4a12-b821-cf22861f6b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.30.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f827c17-aaa7-41b4-b2f1-1c2a5a85b15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.236.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0db19d29-19d1-4d93-aa40-04d82bc41b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.49.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c1b656-733e-47a4-8982-d5d516728f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d12223d-e85e-44ae-9b91-d3461da3dd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a0a1b0-41ec-415a-8552-2ffee8ef0733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.88.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb8f67e-7454-4ca3-a92b-555c36d2f19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96738886-4887-4146-a095-4774f649e8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1709024-cc57-486a-ad9a-a11fa9ee0a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6731a262-fd20-40de-9fa6-aeb266e7fdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1c3e67-0ab3-4652-b07f-e7df07c6acdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af7dc89-0da0-49ac-af33-d43fe0f9909c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96fd808-00b4-42c0-83d8-fd492a5b74b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c32809-771a-43c7-9d19-69c408866357", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2707adf0-fd26-40f4-b7f7-255433faf6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd64f85-b487-4bc0-88b6-34156a3866f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25084ecc-20ce-4175-9177-b1ad152df56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6684927e-c371-4ad4-bd5c-634a6e990175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ee7152-9c3a-44ca-a637-f683dac981fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4eca177-d033-45da-9cdb-4b4355cf70d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1354b15d-bb8e-4fcd-b940-47ecfb111bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b7f4fc-6205-4c0c-ae97-10edcc263227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c332f928-c26b-4b76-8ef0-d2d3ccfcc0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93aa617-3b15-46e5-bb62-874723cafb31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45573fbe-4c17-44a4-9ddc-574c8b7c45cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbdaa7c-154c-4b25-ab3d-20bfdde2243b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.113.53.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151e536a-c170-46a5-9bad-28ee7bfc55c6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.117.180.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df8f759-eea7-4545-aa2d-8c59607f665d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.118.92.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b62333b-7467-4392-a55b-988b93e083dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe17cab7-51ec-4940-8d80-7e60f4671c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.54.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--416c6cfa-dded-4e58-a064-7398dc677ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.141.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7a4857-1c55-4847-b5a9-af4be98b7b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5696e3-eeee-40c6-af0d-dbc8a98ee33a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.159.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd390f4-02b1-4049-b15b-0e02d9d44b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.159.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c97133a-0865-485d-acb8-7c496d6b4dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a365c1d8-d470-47b5-944d-e00d3cb1213c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.204.57.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7cbaed-7cc2-4707-9f38-1833399e035c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74585b74-b886-4c1a-b9e8-4dbaf456dc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61295b13-bb78-42f9-a303-9a7dd8890cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c520aab6-e5f5-4363-b76f-9e9885ef5e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab9c341-5911-41f8-9c9c-b119b7cd1354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ef0c13-fe9a-44c3-b6a3-707601d92c35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cb7f1f-0c5a-4613-9f27-bb05152a7499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.131.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6caf142-94e6-46c8-a6c0-4a27f0e7b065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.176.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e22c75-5188-49db-bfbc-c92bc5c07b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.225.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8dd0272-6574-453c-978d-652179dc73ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.4.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7af127-5813-439b-9169-0345fb40c2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.42.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9096ff5-5187-4cff-bdd8-9ecea488bfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e62041-2de1-4e6c-9666-0c9438dfb14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d09a90-0376-4b57-8c57-6f4ee4d185b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9b20d67-2001-4fc6-89e5-24d545646f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee8a823-3cc0-447b-9369-059fd951999d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb11461-0e63-4fbe-960c-eb4427d42961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74ad6a9-1a57-4e70-97ef-609bce366d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf95376-7f61-42e9-84de-9d806bd96a9d", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.173.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61864524-2302-44d8-97c7-6ad8c5c07e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.66.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ea4181-2bf9-423d-ac46-0f8e0cdddde3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d47cb6-8252-43ab-bb6f-b32ca364327f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.196.106.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1ce085-cb54-459f-a93d-657d19d5a4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.68.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69582309-992c-426e-a2d1-dde0e318d987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.169.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76be93d7-09e3-44c0-a43f-4ff3c07495d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d3ea42-7541-429c-a53f-cb188cd5e47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.37.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7d0dcd-fcd3-4708-8886-12ccf1f78006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.56.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931330e3-5a70-4717-96db-c555cb4c3b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.28.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd354bba-8e89-4937-91c4-ea7fd3ffba61", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92875751-64ba-4340-bc39-4fa31564720a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3660ca2e-008b-4a47-83ce-e0cd172cce3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.120.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d062c9-38f0-46c3-9485-a2dacb3f3cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.55.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2169c5e-ef19-4efd-99a0-d9e3cc5cab41", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.139.50.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c93929e-d100-4273-8442-b45d398aad4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.167.106.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503618d9-89ca-4f69-b8a9-9cb94223ca45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.169.68.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12cf975-0714-40b6-bc0b-10c971455d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.182.253.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a19da28-350c-45d8-a7b0-a4f5d8d602b6", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.207.213.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173c8753-f61c-420d-bb5b-eb960896a363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.5.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb06e293-97ec-4ba4-930d-85b0edf8d4fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.231.46.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5718c5-3d3a-4f91-8f14-41bf343aab2d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.181.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6eb75b1-b454-490a-801b-368036c98817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f30e74-e3ec-4766-acbb-22414d937b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.34.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99409d74-ae4d-4fb0-bb9d-9355d423d37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e3c044-481c-432b-9f50-cf97444a08d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23651e9c-d650-473a-b866-43c6693a74f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed41998-2aa4-481f-aa06-b5c3f521edfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48926bc-9287-4e1c-a87a-28670f65c51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.118.47.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b823c0da-df6b-449f-9d53-3891ae36936b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47285b4d-bbba-4d4a-b1d1-ab808c9fe68a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.101.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb55f4bc-f675-4a1e-8e74-3878804c2169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.170.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa38ec3-68eb-4ba2-a977-258cad157e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.26.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e003563-f178-45ef-8fb5-b9f47b61a8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.60.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf25988c-496b-4844-a336-21f8e825599e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.105.129.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217498ba-3d84-403b-b08c-2c9c32eb92e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.218.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d21233-693f-4cfc-9ef8-c8f9b1f4d962", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.130.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ae805b-c912-4cba-88aa-24efc8a28eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.188.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a21c7e-1752-4085-a729-7ebb1372116f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.228.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d6b8c1-1615-492e-8565-6aacb3c71a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.68.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1334d526-423c-45f8-b4c1-60a24f0ae071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42b5a27-d551-44b2-a91d-94976c8a20e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29bdeb6-8301-42e5-9a60-435271671715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576fb7b9-97f4-4d65-a90d-f779fb9c1d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84761f2e-6fd3-41b4-80af-37f44f652af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648db2c2-0019-4c84-a5f6-4c0728795d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32d6cde-47f4-4551-9eb2-fd9b63d176e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2af8883-f68d-4d93-a738-7c538ae02dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366d11a6-179b-422b-a6cf-e3cc8f557c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03726ba3-dbe8-4854-9921-4add4262abfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aa1c3c-a010-4ab8-98e4-fa88cd4adff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6e1d18-ba66-4b55-8c19-370bc254bc72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a471d8a-91ba-4d77-b9ed-dc81fc3c9da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bef328-2be9-4a2a-b046-0335b100f418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66be9979-e54c-4364-9158-e994fbf97b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a5a898-7353-4e8e-9c0e-dfd2452aea99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1b94d3-f04c-49dc-a263-fe3634337d3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36642ca4-3966-47d5-8bcc-9fd885ccf7b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8c4f5d-b3d3-4b59-88c7-e588b9906850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848d7ed8-eb6f-4468-997d-ff6f5acfa14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a6e0ee-9ed6-494c-93c4-78d5e07271ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8ec4ca-7c05-4f69-9a2f-84fefff639a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.95.213.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7ce696-4dd9-4b47-942e-6c9a4154f8af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.220.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4aea49-fe33-4b94-854d-85aee6a2f8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add95bd1-c9b6-49a9-a792-af1910fa0b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.31.184.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f262f4-1454-42bd-b7c3-6b276d6bcdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51cc607e-db12-4db6-a749-a1495eab4aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.86.15.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfdbbc1-5e09-4906-99e6-51a5ea203341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.91.116.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be193b84-f793-4f0d-9d5d-a09136a3b308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.148.26.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4cbdaaa-64a3-475f-a53b-64754cff89b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.119.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66cf47d1-afc9-4da9-ace4-4dd760ec3b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a6b14e-95b7-46e9-85ce-7d2055833193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.166.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc1aace-b1ab-4903-8a26-058b039200c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.247.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e187797-18b7-40b5-9613-29a5e1b0ac0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09930e24-b20b-4ec7-bf0a-af6bd34d304d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021dc967-e116-45b3-957a-ed995ae4ddb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7649010b-eda4-46e7-9598-bb844b0484a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d649d1-fdf3-4bf7-acd8-b882786b6b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.215.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82613d5e-391b-4c04-a8ba-920d5e964f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254168a7-e77c-40ad-ae57-ac096d9126ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c17dd2-6935-4df3-851b-c824ef3dc6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bd5403-c4ce-4944-8007-7d4c2e520d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5615672-690e-4b25-956f-a7ae7f74edec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b56ad44-588b-4a6f-af31-a4503f2714df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd662e76-b760-4515-be0f-eb744a387fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fba791c-5abb-4dd4-a530-8b499a6d0c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59137821-29ce-41a1-b51b-9f31b9518486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3537a8fb-b557-460a-bfa0-a65b837fbf4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e6441c-7d33-4830-b15d-cb0b7f00c59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bf97afa-e611-4a11-bd6a-7da6a51f0a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576a9ecc-c197-4ab4-acab-0f45d5d0fbe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbff4b8-9d9e-4f2b-97da-8e23c18513be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848910c9-c95f-444a-ac86-4f31889ca198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830cfcae-c110-43ac-bf03-f2555e6a38e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9240d85-917a-49f1-976b-3951e3e7f29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bf3c66-7493-42e4-bfe1-9216e0fbae4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339ffd1d-fef9-4f02-b2d5-3d496954d1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638a409d-c1a6-489b-b8ab-c7249c900a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e3405c-d89c-40d3-8d52-61091af9d7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625e3f09-2759-4a34-9de6-a32788e1e01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5abda18-e15c-4db3-b989-6dda49892663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af906d57-4475-41a1-99e4-33345ab03c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b9de79f-124e-42d4-a3ac-23a3d9b088b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c14617a-aadc-4f31-b4ea-90383361ad88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c045423-fb8b-47d9-a028-aeda44c1b798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c418a968-1d52-49fc-b7b1-8e9f269ba3fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ce2a47-9f8f-42fe-b0c2-f2ef256d3fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49619c19-8d54-459f-ad6c-fbccb0db4ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c80bfb-5c3c-4ae5-984e-667bf75bf37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130f2fd9-8a83-48eb-bf10-1d6d4dfbacbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f90995-0b6d-41cc-8361-2b85134f6764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988c11da-2a1b-4914-888e-caea79f94298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa8084b-3e09-442e-8ec9-77c4ed231221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96c8824-7294-44e5-86d6-3c9dbde85f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949a249d-7bb7-40c6-a890-78be03ac1bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e4141f-de2c-4042-9b75-cf6bbbd2ad2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cafe84a-b91a-4624-8443-da13986c0862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26bc230-24c4-4eee-addb-970e4451b137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b35eba-b143-4aa3-850f-fb55c71d9c4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca029a41-cc13-4ce8-8fb2-47c4ecabaa7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc30826b-5a1c-4091-8f78-45b4492d9c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38768c3-08f3-4012-a1d5-bea05d91e81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afbb245-4d96-4f9b-8efd-cca567416eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab8ac52-aa5e-45d2-b633-ea4bb513d630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3e8f0c-6231-4537-b977-93f9de934f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc3792e-d0b3-4381-8ad5-9973be0566cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce338e8-f10e-4e06-80cc-1c6bf5a922e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5b4bcd-8d42-41ab-b851-5b967347368d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55c82b8-ed1f-4b1d-908f-4fc0e1e56370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf15542f-650b-464e-9dbd-89d88656b8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2827b0-5ade-493a-80e1-30b0e5523b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e228fbbc-002c-48ce-aae1-f17f36d72829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab71595-8773-42fa-bb08-1305e8c5cf76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b87dd2a0-fcd3-423a-94aa-10c09d0d5f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec196592-639f-4c4c-aa85-a828959d3153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5523ca9a-8931-48d4-a535-85ad14c6f4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f9c457-973b-49c8-b7e2-6e4211f0be3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17eea20-2495-410d-98eb-1177848309a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdc4163-6eab-4fb9-9af8-68d92728bb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcad9909-51fc-4d0e-8fed-60ae3567c780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57708097-6bb3-4131-9ac4-42382d7e823e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b8b639d-e7be-4861-8318-fbf6c5ef779f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8256b5-0750-4622-88a0-53e5990d4ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515f0281-b43d-4f6f-a9f4-f1954ecb1aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e489543e-7bb4-4e85-9420-a549f594549f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445ee74c-447c-4a36-9e65-36153d5e8e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ff2148-0f16-4af3-8004-10bc868634b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dc9aa5-8c6d-43e7-8620-0c5fa4c9a374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13024439-ce42-49ac-ab1f-bb727548f317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffb3c2f-725d-46a5-b8dc-eda5858b7e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8808bf7-78eb-4f42-abc2-e4ba15d9fe30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e886865-fd60-44d5-81df-0f92ecc3d7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f0d193-b816-480b-90c5-2c47fec3f109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f8b3a7-8a54-44de-aea1-df9b88556c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c4b491-cdc6-47ef-86ae-abb0e8ed835b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43afb512-973d-4b3a-b252-3a85dae4e0ca", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN, WEB activity. Sensors: cfglobal, openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5e88aa-3f11-4e52-88b4-5f56fc03983e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ade6fd-2928-47cd-970e-5d8f3c8ead63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90218ae8-7d02-4fde-b3c1-754c153e0d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f01be5-e4d1-4b3f-9028-92ae33df3cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e30ed1-a963-4cfb-bdf2-4f070d7393c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c644bab-6642-414e-826e-37c6e152d9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f55808-54e1-468a-bf6b-a2d961aa949b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d77f459-43b5-467b-8785-3990f7e51e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef7b6a8-801c-471f-a76e-7ddb684fa87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8efba8-c58a-40f6-91d0-73df3ac97ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe77af1-098c-48bc-9310-8a9d5ebcb03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a642f5-04e9-4aa4-8845-0bd5ac09671f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d775f9f-a656-4b6c-9de6-2f499623b54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df56fba2-5bb8-456d-9e50-0dd792b22735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a30ad3-bc5b-49e8-afe7-8184bce17e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb31541-a92f-4837-8e43-9d31ab3b2d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3d04d5-ee4a-4e36-bcb5-ad2ed2d50757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1054518e-4618-4dc6-bec5-aca513fc9a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750fbbbf-f6d5-4bbb-98ce-756ef10cd387", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dee526-b888-4699-a4fd-cbe507a866e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175d6dde-f883-4d55-b99b-dac802d2776d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026e8469-8c17-407a-8171-84d2fef427a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082712f2-410b-49fb-bc8d-b5d08639fd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a87f2a2f-12e0-4867-b216-cea32b6220e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e127325-bc12-4275-b646-ba332a23460f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be764126-4ed4-4a9b-91d0-c8363e9bc4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a0b82e-b62f-42fa-8ade-56bf680582ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572e07e8-d7df-475b-bc99-a29c1c68b20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b232f8-d6f0-4815-a0df-043016901c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30881315-0646-46d9-ae53-c8944bf668bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08093bb-55e8-4005-859c-824d791914e0", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efadae8-ae1e-408c-8a00-bfc731c4a08e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8e96c7-a875-4bad-a662-9adffb130c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ab5f5f-dbf8-46ab-843f-330a9685fe7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b2cac2-f262-42dc-817f-dcb91a4a9084", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d91b9e-8288-4415-a305-cb9e8e62b085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587292bb-b12c-483e-858c-1944524a60af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b8d6fe-e326-4965-aec9-947521d596c7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93ba38c-d235-4c0b-b21f-b14fa95b5a36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e7fb63-08b4-45a1-bac6-ede1bac6c854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5cc2ad8-fedc-4d13-b475-be7ef09d0c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97f10f7-5c7b-4371-96ec-c9a4c49e12a5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5b78f6-0764-473e-ba9c-b483b047a757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1e58ee-0f79-4e49-9a69-76dd2b75cef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bbe3de-f334-409c-b666-8eef1b822542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46723b8d-96ae-488e-9ff8-fd2dc4c68276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb17512e-3674-4f58-a320-a50606587656", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead0588c-c40e-4bac-a106-9b8ae45ce153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a6410d-e651-49a5-8bea-1d10f93b1bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c822ab29-7dd8-48af-80f9-75bbdc7501e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d6680f3-6c2e-4da8-9207-22b66434e337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2929d8-a9d2-4dd4-9b2c-dd075e7d3f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9f8c3f-fe75-4b1e-a958-85894a62da4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a89e73-44f7-4e9b-b23d-c5daf85e0e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bea5dec-9c0f-4e98-99dd-a4ad4a4bce84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e90760-293d-4eb3-b4f0-ba54e524177d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2a3053-6c3a-4a1f-8085-fdcdcdde3ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63e8377-bb5e-4f1e-bbef-8cf945ef0dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204cda88-fc6d-4f6d-9c3e-ac5da2b25649", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8286fa7b-6cb0-4044-818c-d4d634974f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b156f263-0a78-4ff7-8063-e8d421952317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705f354e-b01a-42ab-b6a7-9f3d8f3be4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15a7568-1afb-4a3c-9807-6e45a50bfa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaf48c5-e32b-423d-b3f9-a38197e052f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8378379b-f92e-4a5b-b8d4-2cc88e68ccf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942c5af9-2fd3-47be-9560-67682e6f8b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2866fe38-357c-4635-a21e-96c83ebd0bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8af0081-a434-4532-aecb-599d12409841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9826c81b-cc47-442a-a94b-6bee0c0f4acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc706f01-2f27-4a6f-bbce-3c40aa9db50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970f97ed-c627-4b5c-98ea-8117be2ba7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2170d998-79cf-4fcf-9f67-ba1ff92b6124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7c9f4e-c690-440d-b1ef-0a08fa491ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f1abb2-8e7a-4a8f-a370-18d48f9fca41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e730375b-cdf2-4507-a755-554779cc0407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0827a1e5-b17d-489b-86a6-2a61092d1e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1e82f9-4139-4e14-b227-48015ebb3c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca79987a-941e-45b5-b9f4-2e6195995378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0a0493-25fc-4efe-9b60-c60c324d8914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f243a668-2eb5-494b-935c-ba1bb58599c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e235f2-0a5e-472f-8cd9-f6e3b628636c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b34434-fa2d-4b28-9a48-452cab8c0bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809ef655-0214-4f92-83d0-e50adf70bdea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9eb387-b39f-43ef-a771-763d20ea2b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc307b4-5d9d-400d-a857-66be4986a6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daaaee88-507b-471b-a38e-85b8ba863e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f834a6-02d2-4988-9733-fd731b3f9175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797e2019-1477-47c5-8908-4322e25ccf50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7022674b-5be9-4308-9360-c648e5d42230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee15e65-2d8a-444c-bd5f-48c3dcc8d633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70c7c46-9d0b-4c37-806b-a0d86caac1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2d146c-efc3-4602-94e2-6d2390727730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9696c5-921e-404d-890e-9fb59067276b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90876baf-e006-4c09-819b-90309bf3eb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa281d7-946f-46a9-be77-23d98b6c292c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccda333-46a4-4f8f-80e5-8c96d64d8930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6a4ebe-7738-4f86-9d3c-1288c8d9e17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab54783-34ea-4b2a-91b3-8ed17287462a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15feed0d-bf35-43c2-a7ad-494018e7c9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939b7ad5-ef0c-4cf4-bb54-e1fa5f73911e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5596dce-9ea7-4dde-92fd-f57391853a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7da347a-70d4-45f1-b20f-2dd882e2e819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd52a24-ed7e-4cfb-a69a-8413f97b7156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36207ba7-958f-460a-950e-6a246fac9560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16b7edc-dd42-427d-a734-ea8b2858364b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba6ca9b-9f77-46c3-b332-9b2d4b0ba15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96590e4-4d72-436e-9afb-8a70acd7e4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0c9d4a-fb00-44dd-9f1f-2e702cd47e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39c161f-10cc-46e6-ba0b-51b78722aacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68604023-bdf9-4267-a70f-57b068ed95e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4047898e-a058-46d6-8397-ffeab0f1e772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a4b9ce-4aea-46fc-bb26-c4e164f601e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a039f3-df95-48a2-baf8-eac7b0dd4e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dd7354-1c4a-456d-9f31-675c27f02de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48454d5-3dfe-4c48-9c1c-891c38400560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ce1041-1531-4893-a618-61a4cdcb084c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b074bd9-718c-4487-8e3c-3348744c1fca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03788473-4cf1-4244-b8a7-9b0ebfb36af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4b7218-01e0-4a38-a994-9fcbc6add9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d400e3ac-7638-4b79-b14f-c9d046c9ca05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597f8819-973b-4e96-a735-53ceaf5f8c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24d858f-4024-448f-b7af-9083ba1c8773", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86097be2-9c03-444c-a5cb-4fb4258881ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d4d840-9ee0-49f6-bf6e-c238fe8b2d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17feb1fd-0455-4e1f-93b1-223a92050545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1ccb72-d3fc-4238-bce1-e2eda13e7ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734819bb-21ee-448b-924e-5aaebca66259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--129b797b-029b-4fc3-84d1-2ec55fb3c7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee28d03e-d5ab-4ff2-bc6c-722749550f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a692382-4868-4b9c-96e5-ff3b4f8b3353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652563c7-0842-4ae5-aef8-6dfdaa43dfbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a75b0cf-b8f0-4d91-a5be-5815ef8e696d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690cd7bf-b986-44d5-8227-1e2930e5e1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b62a69d-6b86-4186-a7ba-a5badfebc259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d381f912-48de-4129-8641-c1abe59a1e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639a4af7-e412-46b6-868c-a8b49136ab0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538129d7-7889-4646-bb51-657cb04b9229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e5cefb-e4e6-4abf-b5d9-c54fa8ff589b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16574cc8-800a-4d5c-955b-70c958c730c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a959cbea-06b9-4c36-b948-aa4e78c12c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4af43c9-b158-4a44-a19c-a83b23e46d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67cec0b-5887-4aa8-95e3-4646c15e7a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1120d54b-5193-4095-a218-d4d43c978d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0addee8-6a6d-4cf8-806e-6d3432e9fb69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa509435-46c2-40db-a40f-ad776c49d259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1b8865-c11e-4a23-a84b-a0666c7f67a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0398f015-292c-456f-b00a-2d5a9c878dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca899bd-b017-4720-aa67-fddea398806d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba99a5b-2287-493b-8be7-09e9589b2bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e953ff9-ed49-47ee-9e3a-448efe6396c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a221e5f1-bd3e-4d77-9ef8-74cd27b8c366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a92585e-7c74-45cd-8219-b0cc129b4f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef8cd7d-0644-4674-a627-6a2a213a6b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02ceb51-a13e-4c74-bc7f-008c922e1f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419e3327-5a2d-4543-9429-ae1d340d6730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e295ef9-05d1-4a52-a86d-c57e0539d1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9bc30d-7772-4af9-9b32-eb48bd229ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e8efc7-b96f-49a9-9a81-8c61f1aece95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfb2717-82ec-4fb4-81eb-6316e38568be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e104c633-36d3-49fb-a59a-19cac054ba32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15db0e5-4fd0-4dc1-952e-ca74a619c953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569b61ef-1333-49aa-b6c3-f4e2a4c1a6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3728a53-80a0-481b-b99e-d0b810d70a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02668e3-ce28-4f11-8862-4eddc8924f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a34eaf-8bb3-4419-9c4e-02bd7df7692f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be6787e-f4c1-485d-9d83-5e9e998f61b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bd34f4-b2ee-4ca0-b2a4-139cf0abfde0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6865633-0e36-41fc-9cd7-fa4313a037fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a714e5-d29a-43e9-a4b3-da915219495c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62452ae8-6c10-49c4-a79c-24b13b6880c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bf3db7-59ad-422b-9f9f-49442f2efc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9738dc8f-c976-47c1-a55b-4d1ed33ccf0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6860e9-d8a8-4d31-8b26-69322763794a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc8938c-d289-46ee-bb59-ae8e5b82f391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eca6d75-055b-46cb-a978-bd19547239e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f753bb-269c-4183-a37f-ff2586a7b9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809293c0-15dc-42d8-9e93-72a2ea8aaa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65f2db5-a5c9-49b3-b98d-1d636e84ec59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d832db-3543-47ad-a6d7-38d88f8723ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9c63a3-eea3-4d95-b72f-1e891a1ab39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf8d7ff-9405-48e9-a06f-9da7a93a1e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f2b929-010b-4242-9685-0d7d32d63603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847eacbc-7535-406a-99d6-642dab872361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b881b5-7e62-4141-9352-f2b6b10f2894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da77f2a0-ed11-4e3b-a05a-898058e70801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed7a867-604f-4aee-a84c-f937e0e1460b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b7188f-a142-4c59-8d1c-8d195f61995b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75fab5b-12ab-404d-99ce-e1cd6e7f2d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd27340-bab2-44eb-aebf-8fec1c9d6c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9448de-e36a-4306-94f8-61d0b1f0197f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435c94e9-5ed8-42cb-bffc-5324762944e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db81bed6-591e-4daf-823f-4f5a3fdf24e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1c88538-e3f4-4a3d-a9da-57eb032588fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.113.221.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a4ab5f-2280-4467-8abf-9fc88bd7b0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1886f7-8476-4ddd-9de2-ca6959e45762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c89750-2518-4d42-bcc9-29f8276db9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.245.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d56cd09-fafb-4f49-89a6-b40609aea1a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3499bfd-176d-46ed-853e-5ba5c44e95c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4698c0e7-0d03-41f1-9dd6-a3be3bbda823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976e545f-6703-4527-b955-338c29374cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.56.85.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8f45b5-231a-4bac-a863-95d55bedfb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.11.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5115a403-d882-4213-ae3e-bcff76887a7b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.133.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9745bea0-da28-4033-bdf8-ab25126bebb8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.156.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d07cbc-2af3-4ec3-8ca6-8b89f737378a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.5.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34cf22b6-f24f-4c2a-a42f-2f2bfce01acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52803cd0-1f99-42c0-8b10-e148fd7e50c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644bdf4b-7f2d-4d6a-adcf-c5d9ea082cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef82ff2a-ec6c-42a2-a0ca-8d5401770867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa21e03-8fa0-4056-a7c7-bb17fc9249ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aac8bec-e911-4947-ab00-c81acd6045dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a48b2659-ca1d-48f6-bf8a-2993789cd65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468ec3b9-33d3-48b9-bcd1-25b473c5f55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4e36f9-34ba-4995-a5e7-4526ec0fe40e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84afb20d-ae92-419c-b34d-84f1c7d20193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4da5564-3adb-4f31-a36d-4b5968bdb923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33862a22-418b-4f6b-9de9-e8388f454ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d433081-3e3e-4cb7-b2e2-07b3d711afd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d803a131-196d-4ea0-b869-c218960968a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede9e4d1-714c-44e8-bafc-34df9c2e5da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a809eb44-bfe7-47d1-a619-d1bbaec0e3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0bbcbd7-37be-4655-8cd3-738ad9e939a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01e0c83-3812-4b54-b88f-473150de39c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b777384-7e2f-4e87-9c15-81ba6670378a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dc14ce-b752-43e7-ac44-942d044624e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3551d3-de12-41b0-b147-1b978ab0a79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97c9a4b-7726-4702-9809-f074bb4105ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ee3b6c-9c38-4128-ab9a-ea226d5f4f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69b418b-3293-414e-aa26-e95bc5fd81df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e01134-86be-4720-afb5-29ef2b37a7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849f2f1c-090c-4d62-9ccb-64d2bcc11fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c1f156-6327-4d1e-b67c-1f1019e92ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f93034-e7b1-4718-926e-fcd599940305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ef918b-3a02-45e8-ba7c-f107c038660a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f865ac2d-a88a-4524-99b6-59e5fe292402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c314316a-f368-45c7-a39c-80d04fdd4afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99633fae-6335-43fd-9baf-eccb2011db8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacce1ce-0c1f-488c-b1a9-e131bb359509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14a5098-1ea6-4c5f-8ac9-f1f6f3474473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.241.82.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695baf08-5cf2-4205-b304-52a99a0f7295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.240.52.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6bbd7d-ade8-4d25-9924-374339c2d7a1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.63.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8386ab34-4b4c-4f33-9240-9ef0a7d71c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.50.125.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1b5822-89a8-49a7-8c66-023eff80e69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.77.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560a2fe6-a9fd-419b-9d9b-c711840b0303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.136.188.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e1210d-23bb-438b-9167-de8be8fb67ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ea4f16-0c26-430b-bb71-4493924de1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6501c43c-3dcc-4a25-9442-24c0791a9141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4da2d2-093a-457d-a706-7a922d89601e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d42d5f2-682b-4d3d-b0ab-1dd1790cb4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683d2a5d-9010-4f3a-a3ca-9ca85f00a427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82cc9024-69ee-4b28-bf10-c425da2bf79c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af1aeb9-51e3-4d66-8423-8a36d73984f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9cb39f-94ba-4e08-baa4-5d6aa39e6a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6a1f69-13f6-4c25-a8c9-d28adeb0c78b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3884337b-418d-4b61-bcd8-9b09ea906d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d05a50-333a-433f-a4fc-a28b866adefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab88fd4f-3483-482e-9808-b21e8105b5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662172bc-64d8-47c6-ba6d-6f6162474082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3510506-825b-4224-beee-b540f3696e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7795b3e9-f289-4ed8-9029-957abaa25f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2761b9a0-2ea2-41ee-8105-fa05b7c748df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32932f2-a7bf-48b5-9045-0c6053d3436a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1bdd57-7d28-44ff-9466-7fb6d72b4459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ede1075-edb7-4026-aafb-9812dbf8f744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acb10c6-d245-4222-b8b4-639cb27d1538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ee2278-b604-4404-933b-e776935d9b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd90c7b-48de-4675-8862-9895e83715fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af82787f-812d-42c4-9ca7-a748c4fceaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f0890e-7f7e-4a9c-abe9-86b0892e3dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f9b0392-6e71-4c99-907d-7beb74f0a704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b00ce1-cff1-4fda-b693-09281a695634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a707971-0e47-43b2-92d5-4ab8e353143b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d4d55b-082c-4404-99e0-aadbbc1073d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6938f791-0e2c-4ec8-8b5e-967b5e77e474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd69717-46ed-4496-94ce-b6951320069c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9c28a18-b539-4639-b35a-007c3761273b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3252c2f4-1f03-4ecc-8f97-04d9f25d2fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e49e12-0b71-40c7-b237-bd049032cb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f42c398d-50fc-4a3b-9837-5cd3b6667090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4955efc7-b44a-4679-8b9d-3225a2b5bba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86597e97-a7c7-4a72-a1e2-a595e70ed07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f4f5ef-5446-4752-8341-60f3bab60049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169feae9-3a9b-4167-9e1e-5cebca63a1e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbec4e9-95a5-47b4-aceb-e28ea23141b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.162.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9fcf6a-1bb5-4da9-9970-dac65a1dc10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf3e4ab-1832-47c2-b4f0-52e32fad1e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bb6790-ae13-41b8-864a-5957d35265c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6df498c-52c2-41cc-b048-c10379a66f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0b2b8b-ba5b-4ec9-8d4a-bd2ed7b5efec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2008317e-6d9a-4602-8582-c438e492df7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104da2c4-b9a9-4843-bba7-d7ee9ca91fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1a6e73-b11c-4cb0-9def-9d71d333ba92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a1cfef-2a62-48ba-a6a6-7cdef2981de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f51daa-0c35-49f4-8961-bbcca4ac1643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dee968-ad53-4999-bab4-134f0787123d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.192.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2536ad-8adb-48a3-972d-677c0b7d981a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fcbbf2-d141-43a2-8d9e-0ba017556f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2b47b8-cec1-42db-bd02-13326c1c4c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b22fab5-1685-4b00-bff3-ae626b0144e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b166d08-bd2b-424c-974d-c9be21e051a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feff2710-c69a-4f62-b58f-228b118ae8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d74e194-d792-4535-b5d1-fcbf27e553c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ceef542-ac79-4636-864d-dfae47e92cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0721479e-6d15-40e4-88e3-42720168401a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcc193e-5623-42f3-8b2a-850f8f35b985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92955fa6-d948-4d08-a7b9-479fdd3eeb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709609f5-7de8-48ca-8cb5-255348eb4368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52712edf-ee7d-4e04-96b1-1d851233203a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31348c9b-a59a-435b-862c-90cebf532f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f15cf5c-76be-41cb-9178-d4826b06258f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22cab5b6-b2a6-4b82-9a1b-a002b1f7001b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8e6596-d94c-4f11-8478-dcf688a1b948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aaedf74-42ee-4c2d-abb0-7c733d2438d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73ed88f-73f0-4b5c-a3f1-e2c5f8a69f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0ec2f9-30bd-429e-a234-b72fa2c8fd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd7d65a-93de-4908-b621-e23eee05e9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0460bdc9-8a2a-4b7f-88f9-6428f2ab7469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ed1e28-12f5-4515-b503-ffb938b08f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25046890-773d-4292-bd36-490fbc626884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84004db6-2372-4571-8264-87d27cf4eba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca921ad-3bb3-4b8f-8856-75158923fefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c415aa3-e329-4c72-858d-d87f97138003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc8768d-62df-41ab-b71d-700ee71efdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff75328c-dfcb-4546-8144-8948e001d658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583f4766-79dd-4906-b38e-c3b25ddc84f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b832f11a-20de-493b-a38f-ba7b1aa0cd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4226466f-c7d3-4b5e-aecd-88e5edef6413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b51a4a-cfb0-464a-b34f-2ef0b82026c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95222c8b-a6c3-4ad7-926a-809faf4a5203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c308d3-857d-47a5-ab2c-a567cb9508ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5ced87-ebad-452b-a89e-fa9ca007a847", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772ef12a-5842-4299-ae81-e4b868fc1a0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ec4dcf-2dd6-46ec-a2ec-9f4d7f1c58bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f64c06a-de88-4f6d-afcb-e379b9a2e550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382448ae-40ec-4983-8a16-7cc861e6482c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af16a370-ccc7-4bb1-bc87-a82aae0bfd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405b75bc-3ef3-436f-99c6-5b6e1ab90d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9608d627-fd91-47b1-9ef2-81fcd1cc95ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e603e7-7528-4046-a92f-85ce4df2f581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb2e97d-e33a-451b-a1ae-daae63d178ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f224d86d-2da8-4551-a229-f1f9db4377d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a3974f-be0e-435a-a5cf-91182e8e4afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197fba02-1025-49aa-9aff-3f1bc3bcfcfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f66fa0-99fa-40dd-b78e-a6e7da7c01c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2d5618-7612-47f8-a9c8-9e1fb17bf77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ef50dc-6ec6-44eb-9564-8f3f475ea0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214cc228-2268-4ab0-b01c-1232936d495f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0885b24-227f-476f-ae63-71cee1b5f818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33489dbe-ec75-460f-8785-04a9a7873919", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d5160c-1149-4255-a0b0-bb1cf5c3572e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e82a759-4bdb-4374-884c-7fa90df0dd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de055f4a-0949-4bef-83d6-fe7a6b8005dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c81d103-3193-4e67-89ba-b45933d4a13c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c4f535-60b8-4975-be44-821d213cf807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741379a9-9a50-4fa1-a711-e76848bd617f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46848110-9feb-4a2d-b18e-f9cd5f9eb9da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.143.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4814627b-8e57-471b-8351-f33521dd5bdf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.219.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbdee64-dd80-4c7b-bd30-5558aba17e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850f77aa-865c-434a-8058-a883154e5b5e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.195.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e22cf49-f020-471f-90a1-cfb98e5854e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ddbf40f-b9b2-4484-becf-1f5ea389597d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbeb1b14-65ba-42c6-b708-4ba5728467a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.0.42.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91aa4665-a02f-4bb7-a50d-e366f91a39ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.61.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef008cac-2cd0-49e0-be72-66e843335071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.80.240.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa370959-4d51-4d39-a1e6-7aa974fa6578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c24f07f-25ac-4290-8eaa-dc7ee6060fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.115.245.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73865b4-d0a3-4ff1-b4a8-7d00011da423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.12.226.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5c8cd0-0a32-41b2-baeb-ecd3773ba308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d68317c-9e89-4959-9492-0dff1c414694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d09660d-1ea6-4add-af6d-23af07838878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c7c776-ac7a-4790-a51b-55825858349e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca98329-6bd5-4f20-b728-2ab66bdabca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625bd2c7-be63-4031-9355-14260fdc1b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd26897b-3767-4326-95a7-d21376aa0389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51f28ea-63d6-46c7-b8e4-6c88c4ef41de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db66d273-8963-4f1e-acd7-29a7ad3dd51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2585510-dee3-46ed-9f05-df9d323a48a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ca1d13-2383-42ff-937f-f9d3c1f45a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11d31a0e-7c5a-49e4-9a2c-def267684fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aef7e40-beff-43e9-a951-8cfa611b0708", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.221.35.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85c125d-15ae-4d0f-a0be-425fb5b35f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44116b5d-10e1-40e2-8e71-03bc17a51433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--153b43a3-7842-4ae6-82a2-f27d4e7cc60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5817e764-c204-434f-a543-d453ec2082fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b24b164-dcd2-4134-a8e3-8e57b657abbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3090b34e-1d5f-48de-9df5-f14cf0256442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0d7ecc-2fec-48d9-bf62-fec21dbe7602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef2f6f0-e7ad-4a91-b9c5-c57dc53cbf5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b40117-cf09-469b-974f-08c1ceed017e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdd5c56-5d22-429e-a808-ed75f2852c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c00109-46a3-4b80-aaae-ca395e41af73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0738496e-a8f2-41ed-8cf3-b0a0ce3f138e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308a0100-e381-40ff-8583-5946bbb4fc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674efc2a-cb47-4b62-83d7-8f272a9b3360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9300dd-f8ae-4bd5-b127-abbbf53bc0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddb13b6-a9fb-4f4f-8fcc-28e69b0da511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7a0474-daf9-48d4-a16e-9fff0430058a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c435adc6-1e90-433b-b64b-f622bb61e7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d548c1d3-f699-4802-bc88-ce5d26842556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5bb9a7-dad5-4535-9dcd-14682daa8ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23461be3-a0fd-4a6f-b203-84897c54a3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d5a1be-abfa-424b-ae66-5e3d4ddbe778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6788713c-e6ee-45fa-a41d-5568341a2166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.232.100.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68afd70d-46d3-43d9-b153-6a4fe796ea89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.233.105.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea1a631-6b4b-4e0c-a290-9ad92835f38f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.205.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a457bc81-ef2b-4cde-a332-159fa22a12cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f00b4f-2896-4ce2-a9f2-5f5da7f15e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.198.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d73cd6-fc34-4cd7-b8ec-ba8118103dd6", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.28.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df68460-dc4f-4290-8d29-e289709cbcf1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.18.218.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28e96c9-5d48-4495-9219-50444f95968f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.180.59.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4956146-79a3-4aa9-9cf8-3b91532d5eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.167.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96534c34-e18c-4344-99a3-fcb5986b5108", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.59.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--865a7b5d-f2a5-451a-a11b-59a6b0f4b9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.128.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1598500-c2c6-45c5-9cee-e8192c1290a1", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.4.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8fcdbf-ccd2-49d6-a8b6-cf698b36abdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.69.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea7b5a5-4c5e-4237-af8c-e9ba110f7e95", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.254.221.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91ffe27b-1da2-4bdc-9a58-43210dfc606b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637751cc-e22f-4103-b362-32dae31a1052", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2529e769-cad9-49c3-bb29-746944f53a6a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a503e6-9c94-40f3-abe6-ab61b0351c28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d321d5c7-d952-45b7-a7f2-b8cf3c6e79f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7480e0ba-41ce-4408-aa57-4dc826c6b6fa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1ad241-14d7-42fa-b370-4d6200f30e9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63387877-1bf0-41c9-b4c1-f779b8fe7498", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8d8236-6961-4d61-b6c0-6a2f0bf634de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9883eced-66a4-4592-9a98-8fca5e4e64f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0574d2-4f61-488a-936b-1e9daf3a7108", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3c9723-dacc-4d5b-bed0-7282bb9ae278", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f836a6-8feb-4936-8f71-edf33650274b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.218.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905ec608-37e3-4eee-83c5-2c489f112c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.81.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6dae36a-5e55-48d1-a078-c9599b27e695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6078b7-f4bb-4066-97e3-a5fc694c24c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.247.194.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833613e3-efc9-4cb6-b009-191a5ecbce80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.248.6.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a60a59-87db-4ee3-ba91-6bb9f3a19acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15672c03-c131-447f-ac39-710f2add82e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.210.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268e4141-166e-4d15-97c9-c208b50680f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.94.210.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972b09a3-11fa-4e79-ac6b-09c3e884692b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.152.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b2152c-66d6-4de9-9efe-085aa71c41d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.207.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea8c44f-edb0-4490-aa5d-522c3088d93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.3.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8f4840-9a69-4f77-94b4-51e8cdd84cf2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.59.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636a3164-5c44-4a1c-bc22-10c9b9cf995d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.230.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64df3e67-3582-4dea-aa83-34aeacec36a0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.69.6.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43228603-bb11-4a9d-94e1-751bb3989a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65661c6a-558f-4e6a-aa8e-e4b4335f70b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b00c49-98cb-4a96-ab87-183930a78844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8130aa-00d0-42f3-85cf-31fcb4f29856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4651424-da32-4dae-bc0d-01899236eaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.153.175.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86729f2a-58b3-44ed-8683-1fc86ce0f791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.178.164.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ef98f8-9183-4a15-ac68-68776746312d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.191.180.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510e6037-b44e-4cca-8ae8-d83f7c6099a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.238.24.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998a471e-9778-45bd-bf85-c53f326ebea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.149.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230c96f1-4beb-4e8f-8018-aaeaa728bcaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.232.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b88dcf5-5e4d-489c-900e-db50b7f82cd7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.66.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a57320-7c9e-474d-a50e-afd0b6869967", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.81.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64178900-7a6b-4f13-8e22-e2ab41effe49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.141.167.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6feece42-0fb6-425b-9b82-433da8cd4c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.210.245.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ed8e366-6bb3-455c-8e52-d20453b675d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e92b1a-2001-4426-8ee7-a60eeaeaf25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81114430-d29d-41be-8203-ce154e60a7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee7d1d83-1640-4e9b-a50b-a29ae6614385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4445059f-1f75-4454-87f4-36b840c1b581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45296307-b3e4-46ae-bee7-9808ccfc968e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ac338b-b909-419f-a60d-6dd065537257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ae568c9-3a77-46e5-9b16-a4d57b88fd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26087b2-bfa8-46e5-98a4-b2724340ba26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9caee285-64a6-4476-9d08-de54436544eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fe1587-2504-47eb-8d5a-14f227f5446f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--761491a8-f85e-4f0c-a861-9d24ebbf89bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb627c4-91ef-4001-8b52-204f1b722f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4efe5d8-d46b-4bb0-9ee2-697228afc076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e57725-5ca5-4ac2-af20-eb6589450ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a581f6-5aa1-4a0a-bfe1-79d64f59f35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee96acb9-efe7-4cb5-960e-fb86335f8433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f232a51-6a70-4e53-a3b5-f1113255c3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fcd886-5fcc-47e1-9ebc-70b67923bf36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48edcf5c-239f-4a78-adda-69ef2989b1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3074d1e-a667-4577-9a24-d235b7178d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f3cbee-9488-4d48-a34c-9942e3ba5318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698514a4-391a-4ee6-b64e-6867d31490e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33f77d7-11c9-428c-b8dd-9418b95b1d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2555264e-a520-4bb8-90d8-af3cc93a97d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80437542-3bb9-4f9d-ab4e-99177ae37637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74546233-7d71-4154-9dc6-cc2681f826a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83d01861-92f9-49b1-b4ff-31c863f2476e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c9b27c-f7c1-4030-a3cd-38e6a7f618ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d4f182-a77e-4e4f-a895-49ac391eb1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b82c88e5-ae98-4c1c-985c-67d0c2fc92c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fdf1f84-1c30-49dc-a5b1-d8b09227c75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe55c01f-a6fc-4776-9ce7-e4bd6dd7af36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d23706a-ab39-4553-bf8e-90b6a5437181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57079cee-91d7-4218-8f1f-8c56098739c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bc00c8-d863-4194-8841-d4b35f2c7064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7ede21-dc21-45a0-b8ed-143d3fb0694a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f65e1c58-40df-47f5-912c-92db340b9ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b164a227-42b7-4512-b817-5890e29911d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5e864c-43bc-4d50-bb7d-6a46dae271aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc15d36-5af2-4202-86d9-fe0086790305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b851dad0-bf69-4c2a-a047-776cd4bd4986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c841e9-b13e-4fd5-9f7d-8fd82ad95151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0e4a84-d337-46e5-ab36-8e97da7a4b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4179cd2-0ae9-4dff-939c-81979a2ff158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aaa21d0-bbde-4c50-ba02-5cb74da012b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330fdcc4-3f9f-4ea7-b0d4-bace2d0da880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95b905a-469d-47f6-872e-ae66524209f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc86b04a-d876-4802-b1da-71b7475e0f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc60ca50-05f0-48c0-baf1-033caf1cf808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce2e1ad-4e3b-4444-a336-03ea3fdf2e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220fe927-92bf-47af-8c9d-6523ea2260df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3485f62b-ed7c-4c57-a98d-e58558f2ce5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96eb2b35-8777-4565-8b7c-dc4c387c4315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9f9f6d-be2c-4d2d-a104-808db5f1bae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436ab37d-dfd0-4bcd-afa0-d0fbb1f55659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a327f4dc-95b1-4eb7-839a-8d9acbed8ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8574da63-fdd6-458d-9fdb-4903846d1b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da93b3f2-d775-42c3-926b-6759573a415c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15f9490-5447-4e73-9120-5071a2fb1566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c368b6-e56d-451c-8767-1537397d2e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3ec099-11c9-4547-ba87-15c93f08dafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6359ec0d-042c-4d4b-9355-7fa7fe526d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc98246-334e-4a04-a62c-dbc0e363ae19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91489e0-d501-498f-b38f-03cb1c783e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5442aa8a-cf7d-4b54-af4a-85cfd5020a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4de0c6-abcc-47eb-8f87-cd968bb8b0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7718f5ca-0f47-4e79-bd5b-7fb010441b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d15d6b-1bc7-4194-abef-ad3bc97d3ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ed445a-5da7-4d37-b05a-815261f42a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec16b0e-ce0c-4779-b2a9-0f7b117dc260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61424948-ac2f-47c0-a8d5-dd5423034295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e202daeb-9deb-4912-9996-6869a25b382a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d925d38b-d8a9-4cc5-8c0b-28d4ffd16a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc224765-84ca-4808-bccb-0d4a6c540f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd97c04f-b02c-457b-bd0d-27e1eb7d2f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dae935-dcf2-4f01-99a1-036bcdb32b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06e25da-12ae-44b4-9570-2b89aa5e0b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93fc69cf-bf6c-4dba-a38a-d7457747fc5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3127303f-13a0-4109-af68-b6ec69e5f738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c19ee8-0d07-4b61-b9cb-4b5bc6278147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c698e1-c6d0-461e-8f70-ded120ff0220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d3bb38-cc02-41fa-980d-aaa9cddbffdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe7eb2f-4d7a-4685-8eff-f7643482a8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0edd570-6b8a-4290-9926-d3c0abadb0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08748795-46c6-4adc-bdbf-911710f87303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b36c42b-7a3c-4dba-bbc1-d773c7fe0abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd40cfb-cf8a-4e52-aeb4-f7309c5df796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3b30f3-0523-493f-9857-d0dd233bb982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a9bc91-7b4f-4c5f-8ef5-d82c1f8962d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258f610c-77e5-4af1-a7a0-15a8906cfa32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9fc777f-a11e-45f2-8159-a7c759ab4c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff781bef-63eb-4e97-9397-8543dca1d6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83104c29-dc0e-464b-a671-030e574ba574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391c5917-6b23-4669-b00d-c8ebe8066021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bce2fc-0216-41ea-bd7a-cd440a9b1ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbcd2bb-556c-42b5-a29a-faf7bca9c3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51da104b-b897-4776-a314-093a5058ce36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a477e994-e04c-4b17-8247-241d29b29f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f713ae-d935-4f9b-bc4f-93a99934cf3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e95f917-c9f3-4df0-b879-fb01553c2b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ca99cb-25e5-4c97-be77-b8051e2c1eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97469731-e07d-4ae3-a8cc-c65bb158386b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--156a6675-c439-42c1-9b36-ce2207773698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546056b7-e019-400a-8025-fe0a81a2430e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1576426-4cec-48e4-a4ba-0b4aee55f4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe770c71-4964-4935-8582-c4fa789a32a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cab4e85-05e1-4ecf-ae03-e95684b2e38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8e0ced-3e90-46db-8c6d-607f48e440b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc491147-1aba-44f6-af9d-1dfaa83ef296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2158eab7-6d1e-4f38-ba75-b2d2c619048b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fa74e6-35e4-4d47-ac63-cc8cc0a1d162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c950036-a851-45e9-8443-744b9b3886be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4d450f-53fc-49e2-958a-37bc440c266f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a4181f-b857-4732-8e8b-1ed218064a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd59c790-7d34-40be-832c-08f6ab0129dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13cce6cd-9722-4339-8fff-98164a15a564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc61e28-413d-4588-bfb0-79687a03f0c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5184c0-dd0f-4b93-8cbf-859d2636b733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20144ea-1743-467e-819a-a3024aa4cc27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a9a30b-6c68-4e6e-9dc7-4e2b2a59c0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99692f5a-1417-4e8e-a241-08549b68e536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89611d6-0130-4421-85f5-e5b770c7372c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d550cf0-83d1-45bd-8c86-e51b5015a296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2457ea4-83ca-4bd3-852f-63653426af15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09bd4a26-cf8d-4d20-9f64-f8de5c953963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bb87b4-b243-4299-8657-b22bb9263b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6eb048-ec43-4204-89fb-8eaffb8f8f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97cf251d-908d-4702-a440-69e69bf7f421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913ef852-9130-4ead-85fe-d484f829a14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417e2db5-eb72-4c26-a64a-caeb4f6a1fa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0612bc8-6621-4b58-9981-0c0244e37dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12c8e8f-90b4-4764-8ceb-ef0877fb92cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d02225-666d-422a-8825-3e277424f40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c455b590-3278-46b5-8414-35cdbac1a43c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5caed11-23db-4d80-bb7a-837702dc0ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f650fb-af6a-4754-a895-de85c8e09019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56535421-0870-4d97-ac33-759c3494b589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47232f6-9443-4bd9-afec-34cc3ca1750b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba92b56-36ae-415e-892c-50fe1d2853fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcdf89c-7b1d-44ab-971d-133aad30b23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e70883c-7ca7-4a10-86f2-1788c02210fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1a3783-c98c-4ce8-97a8-c8c7378225f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ad39bb-ee0c-45b1-803f-42c9df4b8841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f9a8f91-1eae-40a9-b770-35a79a0bc5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d50871e8-d612-4397-8bf3-a37339797608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b6f0ed-dcb0-4876-96a8-21fcb547cfa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--596662ee-5b62-477c-86c7-481303e334bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88fd6c68-dcad-4b76-baf2-d4f5b40e3659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a43d6f-6002-4ff1-8ffa-a427abe36ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0498e6-02c8-4388-b43c-225c3f436ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c5bb4d-dd79-468d-a709-261f3cc0110a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71764eef-27f5-400e-b8b6-a0554c33cc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76903b97-beb7-4631-95b9-4b80c7c7f929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893ee4a1-577b-4244-8d62-078b828e3559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840abb17-b4ad-4602-b1aa-00c36c3d7c13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549822e6-cef0-40e7-a845-d8309de2201c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ec1dc0-86a2-417c-8818-2605ecaa1daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798865e4-c081-4f36-a51c-15dc6577605d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a79345d-34d6-493e-8d63-2ac8023c2c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb8845f-8476-44e1-972c-669ca2a55240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f7782f-6876-4ccd-ad6c-95724614fa26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08fb7e08-156b-420c-b7e5-25797a3e89a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5200f25-52dc-469b-b426-bae3eef349b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390408ab-1101-42dd-bbb2-b72fc0144599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ffdbcf-b45b-404b-8adc-2483306f9af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189a6b4b-f1ef-4f6f-a21a-e3c8dbc71ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e400dd95-936e-451b-9c4d-dc7caf8095e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e4e6d6-ceeb-4eae-9f8f-18bed5bd86c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c0f31a-fbf3-4c4d-8a00-9c292a06176e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b153eb-eec6-40d9-bca2-02d8a90d0f00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7879d0c9-dc4f-4396-a46f-aee7cb6b75dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d8fb61-3e69-4890-89c1-612aeda97d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c57dc9-f7ef-4574-961b-428737d33033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac1d1af-ce84-42cf-b4e2-1aa3612e1a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9196e70a-a3d2-4cd9-8025-b4f925bebfce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f92b45-5bba-4e5e-90a8-6e9fc4571fb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfebc20-fb98-4f18-ab30-fc5debd0d15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8edf97-3e38-4c6e-851b-c532ff109be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd8c4c2-6235-45d7-bdbd-c9adc6074ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c79343-2f3f-4561-b973-4bf191d207ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ced231-c899-4dce-9e68-605747e2a909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21058c7b-a7bd-4bd8-a6d7-5d649b43046b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6397aa-97a7-4fbc-8772-a79b3723fdcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5ffe62-891b-4741-89e2-356fb33b9ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e013cd-d643-4218-8598-f4c898b423b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a548358-d44e-44b8-a162-e5f1ce534b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a137725b-e9a4-43a0-bafc-945c346aab88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7ad649-6056-4b08-9386-ba3128cb2b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c340e0f-7cec-49e6-ba60-b2be7459bc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb49315-77c3-42de-bfd3-e40d2c7631c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b9c8b7-2708-4d3d-b95e-0b9a96c26585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5f2dca-3cdb-4bfa-98dd-eb157f8b9a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b775f99c-d772-4f84-b29d-6cd96e747e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39cc06d-4197-4278-8269-fd4869a438b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e87c58-facc-4f06-a5d5-a80f1556f12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224c2aac-32d6-49d7-8c88-5d27a253c3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb9795c-0668-42e1-b08c-208a788dbe01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3fe2d18-ee16-4fcc-a8b0-9927b6b1249c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6264fe6-6da4-45e5-b993-0aa00f952690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed194aff-11dd-45df-bfc8-634c5813653c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c892469f-12e7-495b-8c66-b9be72da2cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a4c78d-9df6-4139-850c-53773b5d7f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b81ea6-ca8e-44e0-bc22-daa57c47e92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6804623-7608-4a4d-b0ed-842fa7f0a137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7848189f-b01a-4986-b589-6d67a0e78f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473e7b09-1cf9-45dd-9d4a-f30d78863afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf8e6091-5c59-4604-8215-5778224c8f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35c3541-92cc-4f9a-ac72-5065cad08da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cbad22-808a-43b2-89fb-ba57a5487cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05f355d-d403-41bc-b183-ab6d8112787b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ee3149-cef8-4c2a-ba72-4b9427caf84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fdd51b-45e2-47ae-978d-b9c9c054b6b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7b179f-5b02-4f97-9017-a9840d61c092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a2234d-9c29-4fdc-acef-1535cef2b04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7a06e1-6b82-4311-8f8d-b187719a5af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96160ed-5b85-4f1f-8cf3-1a54ee5e313b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8535bb9a-6533-4aa7-9e14-215e11160677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8740e587-99ad-4ab4-a8a4-a3e416795af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3e0c3c-136a-4be4-bd5d-3b244f62f6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b118d87b-5cee-4519-825d-6d9044e1c285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfed0e8-af63-4505-9e02-d480aace9f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3920d6e-2c82-4969-a1a8-8d37d4c3391b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbffb555-1941-49a4-94fb-746e0ef9ec94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b415952c-7687-4a6b-8be2-cbd023ebd74b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fb1c1e-e161-4dd5-829f-6a9f6aa71e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89bfbc4-77f1-47de-896a-cc80c0150f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d05390d-08ba-4c7c-8997-34a2f9f49516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4288b08-ebde-4b84-90a1-390a686e97d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f8f518c-cbea-4c28-9d87-026fd8f0c0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656891c1-90dd-4ca9-9a6c-a41745d89e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da5e6c1-1a59-4de8-b7ef-249b9e63d9e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48c0a363-7978-445e-9a81-d57b9d476f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc5e8a1-e008-4216-95f6-57ce8141c467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb94b3b-8dd1-4807-96f7-4d94f291c1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5c5300-d283-4e1a-97ba-bf730ff7b846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c316ecd2-6209-4a6b-99f8-973ca337501b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4487cd2e-5d2a-4247-9f48-fd0f32c758f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42dd7c6-bd5e-4bc7-bb41-be339a7b6a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bf4a4b-e1b5-4f40-9348-abea320fa9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41b7b13-9429-4c06-a556-de4673623925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7fe5f5a-c9d2-49b9-a0d1-4c278c7400b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8229c899-78cb-4aa0-9877-4e50372d72dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90cca22b-40d6-4b25-9a29-e5dbaab4318e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c5bf50-d584-41ef-8ef2-555d57301d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9c35be-c31d-4079-b5f6-2d49f206e10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daec7430-efbe-4d40-b076-dfd1275906e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2164004-9eff-46d1-9622-36011cf9911a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a290778e-9e22-4582-ac41-a9f54e9d0b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161331cd-524c-4bba-a51c-29814e8a9b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623008c4-5a17-43e1-be94-4cbacf255c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6e5240-1033-437e-a41b-1a983a411589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0f183c-292a-4dea-bb3f-dc1a1450b5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657057bc-4a56-49c7-a5cb-b8faca856fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f6d07c-9bb0-4558-b3cf-c143516e44de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9b990b-fffa-4e0c-8184-2482f9abcbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538ba727-26d0-4055-925c-14de0da0df80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48416f9-2213-4311-8d99-ef0b7fcf2526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345b4eb9-dad0-4545-b1a6-9b750aaffe8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179e9db4-95f5-4cab-bb39-b8c34a1cb3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.29.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d15dfbe-29ab-4c86-bd49-9638603b35c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.248.103.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6c2497-adef-40ef-9363-c6d2c65ef1bc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.4.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748febcf-2f33-4790-add2-272d713e035e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.5.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854506d7-eda3-40fd-b817-7f297bbb986d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.9.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f541e1-4114-45cc-a01f-fd66b5dcf1c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbfb24d-0e51-46f4-b216-bd245e761ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.236.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b671922a-2808-4fd0-bc09-1a57cdac7e84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.159.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a4d5796-8418-443d-b9a4-df4edb563c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3bb3f2-3b49-475c-843a-c1cf7316b81d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.168.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482eab46-fd94-46d8-81d1-fc4f771ca655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.171.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9841a264-f084-4132-9456-e1939ecb54c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.232.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffba22f-6e92-48e6-af52-c9ef3e491b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.87.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7583ee11-6bd9-4e43-90e9-d06af22dfe94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed69cf5b-969c-4454-a456-f0da63bff53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088c61e5-4bfe-4ed9-a2c7-f271ca2da29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81747e15-a351-417d-a305-084df7d39251", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d403bcc7-3e43-4e63-9ec1-eb02bfa2b607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c994c65-aee7-4c0f-81e6-ebc1170882dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302c459e-18b5-4c95-aa36-21b80e863ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b535c24-7d58-434c-8284-788b6835dd75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b911d8-4f53-4a79-b802-dd4539d52800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2c66b8-82d6-458b-97c4-52b65c175e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c0f7fd-7790-42a9-9602-74db04160cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1399bca6-9920-47b1-a02d-7330aab6ac9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c170e7a-fe1a-4090-9ed6-d42c2f0c1fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe84ee15-8325-4f73-9c8a-ff055f81b48b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c04bb7-25fe-47b7-82a0-aa3c119df395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6567b55e-80a6-4a8b-bf13-b0543b2813be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5929dab2-dd05-42aa-b5cd-c0aaeb464982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f107507-9782-43da-8c75-5d2ea9a39c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14ac01c-60b2-48cb-845a-9614c5f35d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7776ef-ed84-4763-9971-6cbc6777ea99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24264ce8-2516-47d5-909c-4208e6b7c8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445672ce-c1f1-4100-8751-bcec5b1866b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bb122b-0e7c-4d0f-a226-379f5116b3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db33026f-cbb9-4015-a2cd-0aa2bc5c30fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cc9af7-6277-43b5-9d15-a8e6280a4970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb191e64-d2e6-47ee-b715-970783709f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8723e9-c563-402c-9c94-9fd53e84bab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039b99bd-6df5-4f21-9b75-2b0028c6fc2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3d193f-71d3-4d03-ad13-7d2923a824b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a1391a-cd59-4e1f-8049-d562f0932d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7569e39a-b549-4073-853c-cd6575974aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12534dec-25dd-4b3c-acf7-e61ab7a80f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce49809d-960a-4e0e-918f-0c861cfa51e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61353250-5c0d-42ee-972d-1d2156aaed71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074c39c0-c311-4637-9e31-d5845f285b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a75770-69d5-4949-a30b-a246c73648dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fbfc26-e053-409e-a6ca-e9d020712246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa5f3f9-dcc0-4262-be2b-7d1f1e9199dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb83053-9989-4179-92f9-6003b45a29ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4f76aa-ea26-440a-a865-afeb7a5607ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731f111a-e5ba-483a-82b0-51a23649172f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869d6a7e-8d12-4a12-858a-32410be4377d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87621c95-a497-4e1d-9c40-38a5fccaf3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c87323-85de-4f65-8552-c984ccb7eec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241ccc6c-e7d3-4c0c-8ef1-b50226dc57de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a37a80b-8aa9-4012-9428-90e59925b0ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3cda71-6f8d-49f5-98f9-6c2783184391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f6d7918-7f71-4d61-a56e-b1cec675430a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b440677-4a46-4fbb-89c6-f537a6a35ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104dcccd-3610-4851-9aeb-b21c7aae5852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84266f87-746a-4572-8e95-7901ec275385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f825336f-25ba-4cf6-8dd4-b6d1e8bc5848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82450243-c760-4bd6-a19e-2edef9454278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3169e01-2f78-4929-9851-c8ef6f06627e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e23288f-026a-4bd1-aa0e-091a5229235b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16eaadfc-e63c-4d87-8bd4-b67df10d8c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b387dd-4f0c-4d0f-8f59-ca4e3819004c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da40959-8aef-4171-879b-ca68d76bd534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2476d0-105b-4faa-ac23-927a35db9c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9baaeb3-eae3-4509-8cbf-d69ffc1bf3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4825db97-8e80-48ec-82dd-35572ae8034a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64645d29-aded-409a-94e8-ba64f7b11611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6119ac00-5744-4acb-9eb3-80bcf50b852f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc9a65a-9d38-4af0-95f1-2ed1d0c17388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c2e58d-c8b0-426a-adf5-7878ae1caeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02715822-8674-4dd3-a36c-095994f331d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb71bb6-9671-4a17-b352-7358ee8cd79f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ab7401-f306-42a7-8afb-99310909ae5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b924471c-b061-440d-abf6-cfd86f60f10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66bc1f3-e9d7-464b-91ab-b560111f6565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52ec8500-74b1-4795-b0b8-d1812012483f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8e79fb-8ebc-480d-b741-79c915d6873a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e16059e-bd83-44f8-963f-0725b184bab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ccf1592-9d3b-45ce-92f2-76db961370fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--364fbcbd-a18d-439f-90b6-de510f646eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbca6d95-7fe9-41d4-8eb6-d9132a8a767b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c0795d-508f-489e-8c85-7a1ead9b8016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1bbcfb-dbae-41ab-8ab1-bc22a50359e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e437cf-9051-4574-8ee9-6015bc7e593b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca442de7-c910-4749-aa10-e76669b6c1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70d0d9d-3746-444f-9873-95d9c9371dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76dc0eb9-7f0a-4010-94fa-cf1be5b43328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fd015a-bfb7-4c2f-a03c-865f8f835603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31d284e-b40c-470e-b014-adc064e96b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--826538bf-85ce-4742-8ba9-73003cc82d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a756f40-5809-4fab-9110-1874734f5d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2725fed-ca28-42c9-b0a9-c2ab1b490431", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.205.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a18a79-4cce-4585-ae0a-dd207dc3499f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db27f28-8bed-44ce-9dbd-1434125530c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a61452-8c4f-4b09-8e60-0d13701b357d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c28611-aea1-4ef7-ad13-710711a17040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed5768ad-06f4-460a-9c4e-b68a40e5278c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9eed8a-204d-4172-bde9-15dab2c008de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a36618-2fa5-48a5-85ee-5e2515a77820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.218.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc6deb7-3dd1-4c5d-b1f2-958a49df521b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.227.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e533a94-1959-4ea0-b733-7fb92f3664e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.23.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad96528-3b80-4e75-aa83-89450df3c61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf14b45-770b-4315-8a4a-813f8c5b2b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6aeb23-0d00-4b3e-8810-a76deb62684e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0dc1aed-1968-48f9-957d-d42ff61877ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f46b42-f1c2-47b5-94dc-8d792d50aac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e473af2-6049-4b5b-8706-813c508fe83f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b966495e-bacf-4337-a0d2-5a8a62655df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e72b33-a151-43a9-ab8c-20ce3fe34b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fa893e-cbe7-4d01-a73e-70d11b86c208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d7cbac-45f8-43d9-aa81-79ede618f96d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c8d88f-c6ef-4c11-9a30-16fc7738d5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d341e0b-4995-457e-8bd7-d324baf08970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4e5b20-4109-4792-9068-5e07ff4375b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfad2e30-b0e2-40eb-a284-4d5bdb8f7fd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1693de6-6467-4311-82dc-eb9c58ab70e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb379b39-5b7a-402e-8a9d-847794681980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f9bafd-52ba-4835-a7d4-bcfec5681aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67832d78-cba3-48c8-ac99-d5518ff9b06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72190f8f-115d-4ee7-9c93-c27be57e10fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee0d89f-5a57-43ba-9316-4ab7c8c3d80a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc5b182-d152-4803-a543-3c47df1f4c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ca296b-7030-40bf-9fb2-35a91dad34b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8822798-c2dc-4bde-880f-2b4c60fd4a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c54a3c5-c6f7-4c3c-9df4-83da7349ce77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb36d0b-5b6e-4420-a5d3-475e3a559c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4f3e8b-40a4-4a7c-9014-12c5343c8563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc7d38c-c3ae-49f4-9dad-1b1598377874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888022a2-7964-49b3-ac3b-0415ba672fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b726a67-cea5-4314-9458-1defc5556e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630ee99b-ea8c-4a15-985e-452f11c84248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c978b77-65c8-42aa-b7a8-7ab0aef03dd4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.12.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf6b76a-bd8c-476c-a947-2b14ba8c9dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.229.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b4366d-76cf-42d9-b05e-c5e16cb8ad43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.93.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6ef183-1e58-4f25-8f29-ffcac789a47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.143.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb25f0e-f243-4e60-bedd-71286728b01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.149.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdd2f9d-8192-466c-baa7-ef9f366ca321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.21.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d25043-1f17-4942-8326-5cccb922a7c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.26.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921ee051-110e-4540-88f7-b1bdb67e0981", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.62.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5910d5f3-ba22-43f1-8187-c146cb111809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.138.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057a5b0b-7d9f-4b50-941d-7111cbf205a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.169.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86bb5cb-d86c-457e-a1aa-ce10657fab13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.61.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fad0af-4bda-4dbb-bd46-3c6de4343897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ecfc5e-eb9a-409f-ab48-47cb0f9c10d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.208.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--403a8995-d0d7-4423-8e12-5d810bed3144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.225.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2673421f-86b2-4756-ac7a-3902f457f65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.99.203.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de528237-faa3-4e0f-940b-6d51e09f361b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.41.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8970c0b6-7bb8-4c70-bb44-d43284df4f35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.114.139.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8617265f-3b9c-4dbb-884e-4ef5671a72f1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.76.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e370ab7e-deac-4c54-96c9-1a1b7fa4515d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.58.222.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030b0203-8986-4d09-98d5-6cf9f13af27a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.207.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2abb6b-7bd8-492b-b277-3eb1da61b97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f1e41a-5616-45a2-b686-83a5f7aaee5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e43980-8512-4c48-bb8d-8f7545365a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2696ad7e-a934-4e1c-a1ab-f803692afc25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732e9f64-b6ee-4f02-9d4a-0c90de339a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d55c36-9eb5-4b40-937b-f61aed938019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d9e3f5-c761-49fe-bcf5-5f4cf9f14a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd395464-8ef7-403a-b90b-37f050bc7e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0469e638-7425-4460-b7c8-8719911c26e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ff5521-a2b8-45d9-bdc7-f48205fc8fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061c2dbb-6e56-46b1-8a5c-c1ef8095b723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc3bccf-26c1-483f-80ce-8524706ac011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86df989d-1e4e-444a-aff9-d2345b2ce61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a7688e-ef74-4394-ab4f-011b352a6271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d099d3d0-04ba-43ab-b0cc-31433fa464c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f63460-cf91-4238-abe9-3d369693072b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a274c7-5c7f-4c25-b44f-b445669ed662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a840e38-4c4e-4c19-914a-0c811073af15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14293d99-48ac-49e4-a8cd-945ac74fdc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7102934f-c387-45ea-9763-4e60169998f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89664850-4349-4208-b9aa-ea9097822fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5bcca6-0abd-4a8b-bc03-7f08353bbce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83edb7b7-c807-4afc-82fe-c79e460cd8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261a1665-4787-4bc7-879e-b9087c943d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb1aef4-ebf1-42a1-a19f-64615f91a50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04af996c-7d92-4db5-9c0d-43d1a06d2d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c4c5fd-cc1c-4112-8f47-293af635723f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4beaffc-6b9d-4bc7-bab2-728c43b4a94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e73fe26-78b3-40c7-8a2b-a85507da35d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2e4e02-ae30-49fc-bc19-d0eb96b0f5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a328de3d-f888-4093-a52d-abe4897b4ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e711be-e5cc-4c31-960e-a7f8483b94ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8fc13c-cfc0-4b93-8d98-97018f191b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f6f990-2d73-4498-ac9b-ecb7e7af8a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7592f840-f684-45aa-bbf9-daa85367a705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a3e3ec-36a2-4a67-bce9-e47cfeaac11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.101.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f293f5ee-b201-49ff-83b6-840a22aa015b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.183.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aec13f6-7b33-4afc-8e41-ff4974c83e1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.207.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951ff5c3-7333-454f-b5b2-4954652605a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.93.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06087c65-6cf4-4458-817c-8a4813eb40e2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.107.1.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9837984-65e2-425c-9726-d10030344fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8b7e4b2-b700-413b-89f3-0a5390a1cd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.228.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afce699-b094-466d-8d14-134088e783da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f338f5d6-2cc4-4430-839a-4acda2ba9aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.220.237.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12aee1a-ed31-489c-bfd1-25962ca5cda0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.241.219.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b409d4-ca0b-45e3-89a0-18d3f13b7074", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.241.75.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ef2b36-c7e4-43f5-9020-ac0bd58bd22a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.246.23.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a062834-e53b-4639-b389-49b1f8574ee6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.165.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bf29c0-0c56-4ac1-b558-e08190d8f5d1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.179.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d88075a-970a-4d93-b7ee-73ffb8b90f15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb57af11-1757-4312-8791-4056a7a0a016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9addcade-48c4-42c1-8b9f-bf6fb22b38c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53217ee3-9283-44ed-93f7-cbee8358d986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663f8d13-7aba-4707-a68a-4484b852b9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e917817a-a8c2-485a-8b9c-4a227e93099c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65270379-a497-4c0b-a65b-8b0a95030a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d66ab72-040a-4b03-9457-291e95ed12b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4492d469-cb20-42ee-8167-6dcc040f04c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.254.229.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--692ab4d7-ab22-45f1-9f9d-60cda6541f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.127.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209aeb4f-f4b9-4b08-b451-e52cc7f1eb58", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.37.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2838f0e2-b2ab-47ea-88b6-805f901e322b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.9.16.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b0aac7-97fb-409e-a39d-7108cd546752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.213.141.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e65f7f-cc69-4434-b3bf-b6d600ac31fa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.177.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65305b06-f96e-46d9-8c24-341fe618fe32", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.178.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb07286e-a158-4366-bfdb-f72d88f8eb7c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.243.148.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e44ddb5-f5c4-421a-a85f-7374f89a05da", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.243.149.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95c261d-5be7-46ee-ac8d-75b7bbcd71de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.14.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38534520-289d-448b-8bc8-4ebf6d51ec93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.249.83.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ca92a7-2805-42d6-aa1a-a24484a939ee", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a9924c-9f0e-4005-9dcc-f451834c9019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c01be94-523a-45a8-b860-83453b57366b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef62c52-668d-4f99-b93e-a1a74b4330a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932cc682-1960-4d6d-835f-9b18cac7a52e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8938cc-8be2-4e1f-a953-52d7c6edf10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92884d35-d079-4ca4-9908-40fe971f8cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.157.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2412c85-4452-4afc-8940-409923f3a3df", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.169.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3085686d-e3a4-4126-8a3a-73de5ca7bd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.197.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ffe833-d310-4ed9-b1fc-a699e8b2a44b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.218.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ad7348-1f45-4502-b418-a6ad868234c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.219.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7af25aa-3411-4d95-86f1-d076a33d0548", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611cc267-70a4-4aa3-b950-497fa62cce17", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0691651-36b4-4be9-8203-2aa152c4ee28", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402dd8f8-c1dd-4f69-b5e9-004488b3fc39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.200.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0170d0c1-e3bc-47ee-b57a-72638cb4e342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d4782a-a200-49a0-a807-cc991db7f6c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba3e2d8-978e-448d-97f9-762ed2b732d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.72.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88078731-59bf-45a1-ac6d-14bd7a26d422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.115.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd65924d-df1b-4a8a-9e46-8b9a325e081c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.182.188.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d866b93b-9036-4da5-9cfd-03775f0eb50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da3ab1c-36fb-4263-a9c2-df514999bb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee8cc14-44ca-48f8-bfdf-efac1c6b0e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.224.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94daa91-7e27-427e-b110-55608ec5b198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.25.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd990a1-c3b1-43e8-8162-4db1bc2a8423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.67.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d401cb-9fa3-4c3f-b49e-450bd578bfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.68.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa458478-cd46-41d5-b0e5-84e1a7b6a896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14f5bbba-fb7a-4b2a-8ea2-9859e03fbe2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.143.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9486107e-3e0f-4007-8dff-1f91a4c2d119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6246f8b5-4a4b-4e2b-9b5b-29844bc49bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728df79c-f33a-4466-b621-bd954757a4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6255147-377d-4413-8ef5-209776d3f27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecefb954-1920-4d1e-8d6c-21177c5bd863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3df0bd-deda-402a-9935-98b569586157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d280e57e-9248-49bf-b78d-6bb3ba7a3a61", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.162.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3046e9-9e29-49ce-8d4b-ef14ffe2bc98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c3c57e-df88-4970-9fe9-4148a9daa352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ba6ef5-ee77-4a33-8cd2-83ce5b2cb623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7cf1371-b15c-4118-8df4-b2c910e0c329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81eae21c-c38c-4290-9bca-68702b0d2b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597b5901-b8b9-4d47-b47e-f028f3ce478c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90226771-a053-4452-8721-3aa30cb5dc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba3f186-8097-41a3-abe0-6af9351dfb68", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.217.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96799d60-cf44-404b-9017-fafbb8a57911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4333eb-9606-4238-8c86-ad41e119137e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa400d7c-7356-4b18-b9eb-25a189781cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933a005a-1ea2-407a-a037-a4ef64144420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3771c8-5858-4c01-bcd2-820c30558ab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb3ab53-9d8e-4340-a7c8-7ab16c0f59f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acfda9a-c81e-4b29-b91c-108da10b87bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d2b085-6be1-415b-b6f9-47019c319ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531f548c-874a-4c6a-b4f8-0b1bc20e565a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f190087-de6f-4545-a0d7-1558f8bbf32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981a4283-b38a-469c-9c17-9daaa4a5e4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25fdd349-0f0c-4224-8351-ea1f7fbe39b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c409da-bb4d-4914-8b76-7c4434f95ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab51f185-b03d-490a-a8ea-f12d56ac2726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7896b6-92ce-4a69-bbc9-122c7f25edd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a85a0ea-4e5b-4ae1-b526-bc68afa37afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf4021e-c48b-430a-8b60-fff7cdb01f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8648f31a-501d-418c-ae7d-2dcee24cb407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57150f9-ef8c-4a70-b399-da4579a8ac5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caed0011-05f8-454b-9051-9aa03729bc78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec1bab66-5221-4b5a-a361-540ce1530675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d177914-980b-4963-9a8b-6e758782e363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.239.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c8514f-4f97-4e95-be24-8a12db810fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1034174b-c42d-496e-96c7-50d014610510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f47606-eff8-41c0-a429-0e0a5bab0b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c936702-a10a-46f3-999c-79af7724f749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--784a7637-c09f-4676-8873-6dc0d24dd9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d3fc01-8ec4-4adc-83ed-9fba1126a8df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc4effb-40de-48e2-9890-c9c5f0aa764c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973c9441-30a7-464a-8488-29dc85d6ec8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e057e33-aa7f-4a63-ba69-fa57407f9caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd399154-8e43-4928-8d2d-6216d03db4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15690914-7a1e-46fd-b05b-6e5dd37c45bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db77e1a-d37e-4143-8da1-77d6f1767984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6978b16-9b2a-4d4d-9e85-2de38f0e2eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229d1fd0-ba36-4f9c-a3c4-8f29cb4930c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.15.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66823057-b8e0-4442-9b9d-ee87e44b5f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e7c48e-e372-449a-9f5d-44893773c81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f915c93-4732-4be0-8ecd-8ee8ce623bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe62eb6-1235-4f4c-aac2-993aa14c54f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.16.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8e8704-85ac-4c42-a760-6b53e35d744c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.103.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03de602-ebdf-4f6b-8810-bcfde348ee1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.121.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58c756a-719d-42c5-b897-6189135acc07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--340b17e3-6c78-4b58-9397-59bc6f0193ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bbab6a-0d9f-4d0f-bbcb-1eeeeeb45afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6e3eb8-656e-4b0c-8731-cd214b9987fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f260c7c-62d7-44c0-86da-01c31e6c6d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9b156d-6609-4253-a035-6d7715e166dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60988009-241a-4e2d-ac0d-4d6473d455c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f40955-78e3-43fd-9461-c9371c872967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6fb6b2-e252-4b8e-97ed-d06eed3a5942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1786d156-d3b5-4726-9bd3-cb7514f4ed61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4d4abe-a0b4-4956-97b3-c7fa2dda0979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ba2c53-791b-4a0c-a129-a11cf0350a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a5f98f-a61b-4d24-8ff7-6f3e19e809c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741108e7-9803-4880-a243-388fa914fc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48628f97-cffa-4d5e-92b4-08281824b671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5224e2-530b-441a-bebf-d7e83e54dcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0619ddc2-d7ed-46b7-b6fc-8a049557754b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a12b65-9e14-49b9-957c-030ea9a3936e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.92.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3853b4-87f2-4b43-9957-dd09302df30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.21.50.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74800e7-245f-40fc-acaf-264803c6eaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350c2487-ee54-4f1a-bc8b-2a6e495fa030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.155.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a817d73-9e5c-4a52-b237-89f45db7717b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.155.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf1f928-65dd-43c0-9a7f-c8a8570f0454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.236.82.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e1479b-c39c-4a74-abd8-01324c2ec271", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.37.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f647e33a-7185-4ce4-924b-43bc369459a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e72775-795a-4b33-9d42-0bc891a6696f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241c22b6-0697-4d4b-8a13-b2d741241971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d542b3b6-f16c-4a1e-a91b-777896f3cae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82147f8-161e-496f-b944-62846a481afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f837239-a4f9-4562-bb1d-44cf771543be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67033c65-16ca-48ab-b87e-eb9620e4ecae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53e517e-e9dd-4c6e-ba9c-5314b5a21e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc21ad4f-239a-4ecd-92eb-670eed0d7dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b01d44-935b-4168-ac48-8b6872023a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9a1110-554a-456f-ae8f-3ec324a4a0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9a30b0-3e82-4b9d-8f74-c5449bab0fba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d78abc5-06e0-4d46-bc07-d79dc83f275a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07d6cb4-b05c-486f-b7c2-dbf77c8e14ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da76bc82-776a-4a79-8377-8880f029cfa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c376001c-47f6-4067-9e8f-0e683b54cc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.173.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e454dfa6-43db-46cd-ba83-f5f51ca7393e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.7.32.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cfcba99-f2c8-4d07-997c-7c8d3bd5457c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.12.108.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026a5f42-0741-449b-8534-fabf007f4324", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.166.252.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5f00bd-bc92-4bb8-8bb7-e4c714d426f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.202.18.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d88063-0b78-4055-8986-6058931a5d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.209.246.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c185f013-476d-477b-bd32-08204aea40f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.27.136.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ab8c56-da10-49d7-a970-fcae260f884f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.45.200.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0d2f8d-153c-4a1b-af17-f7663d599bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.119.25.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938323d5-1e15-4f6f-b03d-8468b7fa59c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ecfcfd-e9f5-48b2-afac-12870c742d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc94a40-8cc8-4868-81af-f73662697238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f06dd2e-1f84-4db1-9a4e-11608e53abb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.131.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41110114-3164-4840-9935-efd1dc62b826", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b49ccb2-ba15-491f-bbe6-cf9c59b2aff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d866d7-af1b-4ae5-939e-2485c4f7d4b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26951da6-c2b2-4c85-b9cd-63bf6d3e6ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80e4fd5-3a40-4543-9e03-9963506321ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4937e9c-6874-4ad2-ac0e-578ae6d95068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41093a0f-dd34-4c66-8980-72f989f61ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd495d89-983a-4f68-b769-38f0b2a59fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5c18f1-1a44-4910-a5c3-22e5bc476cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6675b230-bfa3-454d-9648-90cc0c305e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448d65b0-755c-4f21-b617-fcd35c2a0ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d1323b-c164-41e2-8065-12612bcea02e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a7500a-68dc-494e-a75e-230d6f518f89", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c72564b6-20f6-4a10-ace0-f8b4b3c0ed33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103dd06f-3b79-4e33-98c7-447bddeeab0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2df87199-954a-4d22-b05a-fda08500eaed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa571e3-64a2-4339-921e-05902121312c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f87d9ed-c585-4366-abee-bb9b56777149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ec42cc-4863-4b0c-926e-8eb855a7e37b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ee091c-4aa0-4c74-a2e6-31802f213a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad3eb5e-5a1e-478a-822d-68ad1ce269ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6c12e3-811f-4d13-ae74-8015fc4e9cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103ec762-93e7-4d40-b1c1-330012679ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dec7a04-970b-4e66-95af-e496821803df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb79b40-770d-43af-8402-04b03e1ab36f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b56dd60d-3b28-43e0-893a-e3ffda015cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90810f42-a0a4-401f-ad14-bc38324f73a4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdd01e5-31b8-49d1-af4d-f7a2b2404ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bc2afb-2b57-444c-8df6-5eb384905886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221efa90-d07c-4744-983e-5492bf996332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7b5cb9-d9df-4968-9b2e-114f992882c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861c4a23-e184-454e-9258-11a8eedcc48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926f824d-f1df-47e0-b4e5-024251c21d33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dee5ca8-a3db-4909-a3a9-c2f508f4fab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fd8409-4245-434c-89b7-1641ca12f088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4512bc51-0375-4a6f-9b78-b6f4e607e9ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acc73f8-497f-4ec5-886f-8e51ae51d7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a973bc73-9522-4bc5-8c7e-97827ee25137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a58fd6-d195-40f4-9863-36d98df3ee33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d39513b-a03b-45f2-80ce-d42de3b6575b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5aed9ca-1e4c-4d55-a8ec-44a4027a43ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b86415c-03ab-4780-b2ec-22da514e7739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb929aa0-31cd-4dc1-b640-dddb5d6d22fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de28d10-f36e-462c-88eb-e04145abf50e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.79.181.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc33711d-cb90-42f7-9176-169eddabe272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.136.254.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9032acd-5a1b-4a50-9394-1f514bb822af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.154.91.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db88ea20-a80a-4c01-b7c2-b0915a33e4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.37.36.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c40bd59-d22a-4687-af26-2385de9b9c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.92.66.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1803fb-4265-42ca-9a8f-efa680f9c2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.107.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a22b160-e323-4e92-9125-9b28766f4f7d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.134.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0313cb-4c97-4af0-a64c-cdd22ba15096", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.207.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0498a99d-53d3-4d32-ad8b-cc1e18a65c35", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.84.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f4acfa-5eef-4632-a054-5982af6ffd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.3.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5083b2ff-3618-48ce-81e5-fea03ca831e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.46.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134d8395-321a-4cfc-bf1a-3649f5717c1e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.51.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afba23f5-6a5f-487b-be5d-32546e1ba495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.66.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147edf6e-36f1-4915-a25e-4d88d2854d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.95.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--614fab56-444c-42a3-82bf-46b0596fa430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.52.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862d6683-b1d0-479e-b0de-bc723a49cfc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.52.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc942e8a-cac5-4f3d-9765-560bdeaf6c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf65fa4-df30-4093-a35d-8a32aac5d0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cbcbfb-3034-4d9e-8586-d0b4f00875ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cae1f1b-0251-4ed2-aebe-94ca5aadcd3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc373b47-735d-4033-8584-c0e5bf849970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0c6999-47e1-4bf2-8832-7cecf4fff5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac7a858-d7e0-46fe-85c4-8f51227e4c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.206.243.0']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1313863f-16e9-413b-a0ba-333a23b68e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.239.180.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97fde81-9ae1-4f9f-a5b6-111ceb13c42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.216.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca97a94-7794-42b2-9b47-8d54137f6446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.55.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da752e2-588d-4100-a5ae-655c05b4ec5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.106.89.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01029d70-6e66-4089-b202-40659bc2844d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.42.124.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04e438f-52a8-40cf-aa7b-3e138cdbf0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.141.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52566b35-cb46-465e-a0b2-f32d2d328b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad340c50-740a-4998-8c99-485674d26f7f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.57.170.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2215dd-10ed-42f2-b2a8-85387b4d306c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.30.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4837f8f-3575-4b6a-b90c-9ae7328c49e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.97.28.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6dfff00-13d3-4b1a-ae46-5abd221d0b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.67.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd62595-13ee-469e-8731-598c15074cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.118.119.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef097a3e-6987-4070-aadc-2d09e77872c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36b3b9e-d350-4fdd-8e99-e7ca066a4ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.188.231.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671cd4b2-f902-4519-b7ca-aacee95ac9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cedb437-e443-48ac-9560-8307267ebaf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173fc021-6953-4172-859e-56df3c8ca993", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.191.197.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c18d38-6cf2-448d-a11b-c85eac1938ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.204.37.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7abb3aec-d41e-43d5-ae44-dc81f3cc67d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.182.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--358114f7-7c32-4665-a6ed-884b3088271a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.144.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6432ddb1-78d4-4fb2-9516-a635e84ac319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06eef9ca-1670-4c95-ac7e-f6217149c528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.133.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5db232c-dc2b-4aa9-95a5-7c124622d436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.164.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf7b9deb-e398-4e14-8247-c3cad8894566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.47.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcc067a-2ecb-426e-9070-1839aaab2709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.220.79.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429065c1-c79a-44f7-b3e6-8f206eb32304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c386320-f8b8-41de-9e1d-3368025b7ba4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.185.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c522ef-484b-4546-9f2e-eaeb3f5ea004", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.226.181.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd30a8f-d0ba-4ce7-943e-9b0508dbe4b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbc2ce6-ecea-4edc-bec1-85e2bae6ef58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5937e8-9352-4633-805d-59e6c93d983d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.176.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3ffd39-08ef-437e-9492-b5c0e4b76556", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.245.217.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fa98f6-d822-4a13-b89e-94fe78fe4587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.250.196.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede44c16-1f67-49b9-950e-f72e9e846eb1", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.254.23.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018f1187-8d10-44a0-93a2-00c2a998e596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.105.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8a6084-6d10-442e-8fda-2d8e283daf27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.226.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fe48ec-57a0-435c-9fb4-0883d850dc92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.234.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6b741d-c760-4966-94a6-523781ec506d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.237.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c055d6-1644-48a8-96bb-26edddee250f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.115.146.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8452b55e-2fa1-4ecf-aec2-1c443e180e50", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.123.62.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd98593-fe4d-4e14-afaf-5a0bbb0d0735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.135.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0313d005-ad9f-4c2d-9235-5a08e816908a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.215.65.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca4b076d-323a-4c1a-aa1c-263ba8d73eee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.119.228.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a80b4f-3e2e-4202-8b33-d1ea3ee0d473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf7c223-3604-470e-ba0c-8ca501e9de25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.172.217.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e719b91-1933-42a6-9985-9a50636832b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.173.227.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7a8b30-6e83-46e9-98db-f35bef688a2c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.180.57.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98437099-b5f3-4e1b-8ceb-81419601edf3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.203.239.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986dcda2-3d08-4730-bfa7-f961545bd590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.228.117.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd7eebb-80c9-476f-9c02-a21ec90213ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.54.23.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea26e1ef-0663-4089-82c3-444e4bd67608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.9.48.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df16e030-2724-4164-8a09-b806b22a86d1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.7.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc37900-e738-4c6e-9f64-33e8357a9bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.95.153.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3a2ea5-b2f6-497e-a740-f070f5f096a7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.106.20.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4ace3d-ac66-4e4f-b4bb-8aa7d2f3673d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.14.132.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b635b2-2f4d-45ef-abce-dc04aa6ddf12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.151.209.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b2075c-4f1b-4fca-877d-d650933cd4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.239.58.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58c3273-2dc7-4aec-ad93-5623ec4792cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8b259c-9caf-40b0-a632-5f75fd8287a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3ab0c3-47b9-4658-8ea7-15136532b85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d69b9848-52fb-4ad2-a268-9287e7ee8f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cb49f5-c053-47af-b960-5af6ee306720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1572b5-ab8b-43f4-9212-87e4800dd606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdd4f17-bdf8-438f-8b73-216a92a496e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79066425-3c50-45e1-b11a-74f6b151a671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c3149b-064b-4a8e-8299-159e0c327ed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055d0010-bf19-4ce2-be13-ca0b25ba85d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f626e30-5437-4299-b05e-06bd746ccc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836d2f36-534f-4838-bbfd-9ba15e2d233a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d4fe52-9eb6-43c5-94f6-e9058e330409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5844f6a-5c98-4506-8f75-17661b4e1de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc5631c-b01f-415a-a0b8-6e32a8f1cf71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e6e546-1fb6-493f-97c2-b7cea32f0002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053107f8-b936-4dc4-bd1c-564a349037a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a03ecfb-0a79-48cb-99f7-e6a8ec7e4bf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0282f76e-b925-4951-bc56-1d9cdc8151cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c893d0f1-7406-4662-8e16-d0d1c3e82211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78307a07-5c12-4d45-accf-efcc25916392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534bae93-68c0-4f02-91b1-d6a024a7548b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f9288a-e967-4408-96c2-5fefe913719a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0b1e9d-2929-48d5-b8fc-5133108a77ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e64ff7-eb3f-469c-b8ac-5db6a3aafd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b1890d-9898-4675-9030-4b1394001dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e125fc-5fb3-45f4-a55c-7af91d028a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5fc250-c542-49c4-aca7-d7d72b4d1c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61040ca9-6a4d-458b-9330-5e3efe281487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f72da44-5918-41b5-95fe-6e7dc421abdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.107.179.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7636f2f-688e-4116-9d6b-c8278b98a164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.153.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc5859f-1914-4a8f-ad19-80e2eb58631b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.156.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4552dcb-1f36-4c46-b46d-456c9feff34f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.194.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7243a852-f584-40da-928d-8d1cddfe4759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.157.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6149875c-056a-426c-8890-ab7813df16aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.106.29.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6617092-c5f7-4992-b7f6-fda906705a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f90e97-8210-40e1-a6fa-4356f2580e37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.120.190.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70734c2a-c1ce-41e0-96ff-85a8d0e95cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.132.187.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbcb3072-ccec-4e48-927e-554e22f8b065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.135.137.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f3f541-df76-4fb7-a65c-626b4ac98090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854fc34a-4678-4c4a-863f-bde97a18573e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8eb8f97-e8d0-4ac6-aa26-6450e7f843e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11989c8-27d1-493d-845f-6484798c9535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe803e4-d2f7-4556-a8f4-7874df69e9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2038026d-d819-4f0b-8400-fa825754684f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.14.58.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2036a6-39e4-45c1-b22e-5d1d59d212c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674edf57-e340-46bb-88bc-baa87f5997fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d70080-8c25-4036-894d-55f182a2828a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a116139a-9c7a-49f9-bbe7-6ae046c079f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d13684-7fd4-4ad1-8186-3902bd71bbef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df2f806-258b-4db3-a527-a48133ac906b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a33dd7b-e8f9-4fa2-92ef-583d5ff22219", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fa76e4-3b72-4f4c-a3e2-0db6848a157f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0898b8-a365-4a9a-9d04-10e69443c3c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebfb185-27d6-4c50-892b-12553b87ef42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f4dc0d-2970-40b2-885c-5c43a797f2ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70f2c03-3516-424b-b0e5-c32015636e77", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaab6e7-5d5f-43a6-bef0-15aaaebdb867", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b28854-231b-470f-92c9-fa99817ae121", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b3202a-efeb-4489-887d-2377ce4f7caa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffce772-10fe-432a-9eb0-4f32e2b12e12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ec8c05-739d-4e7c-bff6-ab5c4e774d86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076da78f-edec-4b51-a4dd-3f7314bc409a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1677fd64-fbec-487f-8510-d0ed29d26766", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f74aced-d2be-497f-9b31-8d077e9e33c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9e3fd2-78fb-42c5-ad33-c3023561655a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ca6569-3fac-4d03-808a-95ef8f29c8ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21001596-0174-4fec-a777-861634201624", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f88ae75-d8f2-48db-a0b6-e7626fa7a092", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626ab70f-cf1c-46cd-b426-5d2e902e3aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.13.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe67d7d2-c43a-47ba-aece-9d70d9739b4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.195.146.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c075fbc-b4a8-4878-bb33-443fc457470e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345210d9-1579-4580-a0b2-c2284e3674cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ddb796-792f-4732-b9b4-5db0bff5a933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f682f49-c370-443e-9e42-3d49474cb46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7245fe37-52b1-418d-9b19-9ed548bef24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe96cda-1efa-4652-bec5-1e544f54e714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541ce725-f832-4889-912f-bafec82e1089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.202.223.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a85b31f-1c7b-4a6e-a6d9-92940609375a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.203.236.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84078415-57bd-4048-9bb6-2b9f38d5d7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.204.170.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d1778c-a194-465c-bb7f-f3085d6e79ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.21.123.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4440d84b-3845-485b-8487-1f9dec1a45c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a4a5fe-ca23-40f7-84df-3bf1507939f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3764197-d886-41aa-899b-c564f94a0771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6eb2645-9432-47f9-a4de-793715c11fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938ecf17-bca4-4bd0-b6c1-5a0cc97071d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859c1be5-8dde-44ba-921d-20715799c1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66be5a88-6045-489b-bc33-faf57501838b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a8b92a-6306-452b-80c7-c34da17384d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a79d2f-59cb-4209-b201-c395b089d75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab71bb32-22d3-469b-b864-6b53b7d2959b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c98242-fd3a-4a1e-ba60-596608648ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0013a9cd-710f-4654-9a64-9c1c3d6638c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e2f980-d01b-4bf7-b815-0d0d1403e532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fcba630-453d-4bab-b45c-8de04dd27506", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faed129-1fcb-4325-b671-9bcb0ca178a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcabaaa-b7be-4182-bfe4-173ce50946b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9f5479-6331-4a61-99f4-2d87bc74df48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f7f334-2ed5-4731-a050-52fed971c8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7672f526-b0c2-4d36-b608-b00735b7640e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.231.59.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f1cd4d-4e97-4ebd-b163-d22b6a4c2c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcca9bfb-cdfc-4a89-9e83-677232342a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687ac0fc-ed40-4603-9a75-547d7c4576fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965e6187-4003-424c-ade6-2380dfc45ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db733668-fa8c-4e41-a2a1-73ff9d92e943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f53c654-db53-40de-a8f8-f35865913834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb35cd7-c14f-49a8-a2ce-617bbf7ef84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa56ae7-f09f-46b1-83ab-3fa15c0ae778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cf96029-264c-470d-a603-ff9556d3a443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79859da3-6778-487a-8fa7-f6d0a76dd7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717cf4b2-6b41-4ac3-8cb6-6724d85e5ce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4ece1a9-7ff0-457b-b1a2-760756e9c6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80695c97-016e-49f3-845a-d33840699dc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a8c363-3590-4579-b2e2-5cb216793f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbc5029-711c-4c64-8579-c199fdbd0beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11a1b9f-3c67-4109-a2d2-5ce17b3e5ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdadcf83-7d55-45bc-a8a3-cef6e99a4a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e7177e-2b7a-40f3-a8c4-1ff55cb2183a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15aa7a10-54da-4cd1-8482-50f1dad38dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aaaf4cd-827c-4ade-861f-f9aeebaacdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09dcdcd1-d9e4-44dd-a711-8f7ad0824cc4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a360dd0-1387-4cb0-8977-da3ec11f8b1b", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c21e0f7-c90f-4031-85e7-000ba694f533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a059d1b-6ee3-4901-8d11-6d38deea1054", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.245.40.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa089bc-317d-4eff-96db-ac44fe80c0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6375f330-5503-4986-b352-9ad6522823a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdbc73f-49d1-47e8-8a42-438ad543be72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4aa4ba8-a01b-4087-b628-f271b18ca55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.148.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8c054e-54c3-4376-92e8-6a9233ba3abd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.36.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a610811-0098-4b3c-b325-393ea01d2f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.52.50.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab85469d-82f7-48d9-b4bb-9335875a4bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.107.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1908fbb4-61c1-4cb6-a723-58bbff4b0e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a618c8-c18c-4199-82f9-4a353ca3e10f", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7cf407-6f28-463f-ad84-79f2837e5661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebca343-0966-43cd-944d-55070cc6edac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8890e4b5-41e4-4515-99bf-3e1c798b6898", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.13.24.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9ae0df-c119-443b-8f5d-c3ad8f012bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.139.140.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ce061d-827c-46d8-a52f-e6d946370249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.139.153.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a10f493e-2393-4c3d-8639-3a01990b3b28", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.170.16.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d4d543-1b6c-4756-a065-26090138e1e9", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.209.124.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d483bf-9dc7-4bc3-9450-8a1d6d5269d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.226.253.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cff7301-e774-4e89-8b39-c6181f8e8a45", "name": "Malicious Host", "description": "Observed: MSSQL, MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.4.249.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa69492b-bb9c-41d0-adcf-0ee6764ab11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.53.83.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70afbabc-2f54-4aeb-bd7c-f25823309c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.69.21.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ad7905-acc7-4a4c-8ecf-6feaf2638836", "name": "Malicious Host", "description": "Observed: MSSQL, MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.89.27.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f1e528-e675-43f6-86bf-5245906b1a2e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.102.210.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0af2ea-47b6-456b-b01e-d21a0dd425d8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.107.88.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc4cf64-00a0-4b92-bf8d-70b916094d47", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088d74b6-1240-45b1-8054-25a4464a8987", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.156.192.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716ffbd3-554f-43b2-b914-f5240fb985ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.228.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad22cd9-cdca-4250-a388-fe6ec6a809af", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.199.53.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80db15c6-462b-4d62-9c64-9018b9b19e38", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.241.45.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739dfbb3-45df-4882-8d23-94c57594bc32", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.123.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193e4f96-9995-49da-9dc9-fbb9655bb3bf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.149.168.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d75807-e6ab-464a-a04c-b13877d38be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.161.173.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bda1f52-961c-4e9b-ad81-f1163ecbaa7d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.165.26.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbe3a43-49d9-47ef-800d-43e253975f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.71.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72788532-aa2a-4f25-9453-6556a2677407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fd1af0-88f9-4ac2-a623-bf56be331446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec18e03-142c-452a-8103-353a4fc14684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dafcc9e-0743-430e-8c6e-034b68fe9a43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1c9ede-c2d6-4e24-9162-fc50f7be384c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca4488c-e358-4356-b072-84aa3ea2ae02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cba06e-9ed6-43e4-91d8-cb9bf3efbaa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74085d2-48e7-4c7d-8c05-56e6bf0f144a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a67a10-d0c6-45a1-aab9-cdcf9ca8c1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62890f90-5503-4803-9bf4-9087c6f10c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b74713-2847-4bf5-8734-9bdd15be0d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5890b56a-5e71-4b27-a500-9cc742ea59d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed76df8-4dd5-45d2-9219-7346e02671a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c307e869-3eb6-4422-9211-a28b5a30eab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1442ffd9-598e-4266-be74-54529660a8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18309c5-45f8-45e5-aef7-8f0005a14bcf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.40.21.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5986e779-e5dc-4b3f-ad37-6d124f5c1dca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261b0f32-899a-497e-9d96-b3408faec2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b3baf3-7f7c-4000-b732-1fa7045e36b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.44.20.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7447d2d-54dc-4318-8691-41d278cdd8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.178.195.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278c1289-2c7c-48a5-b0c1-6283dd39ecdf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.194.140.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964adb08-13c9-4289-9573-19f30b8e2f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.90.38.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebb4c83-fd32-4809-938f-54e62d5e8c9b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.114.241.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f297709-4390-48c6-bfd5-025de256ba4d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.129.122.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2a58b1-c6e9-4348-a802-c1aac258fc5d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.142.102.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c6e59e-270f-4a0a-80b8-2c1ed6da7110", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.220.172.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8fdda0-ec95-474e-9df3-fe2b9d0bd80d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.221.50.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d74584b-1845-4fda-a012-e1d372e1a36b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.77.165.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506e805b-3e9a-4bb6-a6cf-5f8438c58567", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.8.169.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c65e5eb-4350-43ac-98fc-d2485dbd61fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.33.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc518c6-38bb-47d1-bdb8-ab8d08f7e18c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.96.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020c00c9-75d5-48e6-adf6-400eaaaa6ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992f78d8-040c-415e-b0dc-2b3f39e7ba92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.37.19.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b720a82-5889-430c-bb72-55fa77b7f153", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.37.81.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0cbeb3-5bf2-4baa-a68c-623d11bb78f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63556d21-36b3-41d5-8aff-553187adab2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449f695d-ce7c-4129-95cb-8552cb31eafa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0e1627-8775-4534-8dfe-7aabc445167e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.90.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48156e05-2c3e-4a7c-acf3-e0fa5959fde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.158.31.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dcd4a8-0fb7-4c1b-821a-0aeb92a4930c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157679af-cdf3-4db9-9435-b5be3df67503", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.236.240.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b91720-b929-4b3e-8da3-07d70f084ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8b4694-1b95-4094-bc96-921f7f503455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d31564-55e7-4d9c-ad3f-dbba2f342ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b54c1c-b28b-4e05-81f4-1b6dac5f8c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.145.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6866b66e-6f2b-48e9-b739-a5f33533e407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.3.206.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8728b7-05e8-471f-bcb8-8fb1cd409e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.95.10.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2235bbc-b667-4151-8caa-dec0f1e42b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90732bf-3763-4453-a9eb-9302acb22027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26d014d-87d1-4d6d-9f0a-2305b3651333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4041276a-4e40-476f-8a1a-00fc01272d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2fd7de-5800-427e-a979-2dcd9a0d7af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e492e8fd-8a7a-4130-aff3-d05f812ad900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d179c7b-1579-4d23-aedc-7ec7503dc4f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2d51d9-7368-447e-a527-8fde2cffaced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb84070-1477-4f7e-b003-fa3b9762f446", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.146.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f370ee-de85-4920-b097-e7e265619de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.142.43.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b6cf82-fcb3-4aad-b86d-43da8663d60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.143.1.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38266b8-6acc-44fb-a41f-42f0906c1b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba38c94-2c21-417a-9cbc-3a667fccf026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--269b4fa7-ef6d-4d49-b603-4397c3323e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dbdf54d-5f6c-4c3c-a046-c4a3f0e0337f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66cc27a-c885-47e4-a15e-5190b8a7d5f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a85c9b-e9e9-4140-ac7a-1828f0dc1308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3ad9ab-7464-447e-9e1a-b9aa53e6bfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ae8527-9c01-40a6-b7cd-4ba9525f4635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac0344b-4300-4d45-9b5d-345c8f904b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242783ed-6ded-4358-a3c5-c6721164ea5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0cb1c1-183b-47b4-926d-fe65b8cb0e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355aa1a6-aa54-4b0d-9dde-707ea3f69e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d68202f-05c5-4682-b08c-12116f315a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b43c926-ef01-401b-9f66-a5b53bbab489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56b358e-7558-48e1-8e7a-c4000fc59831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--278675bd-1346-4e00-bd89-2fb8608ec4ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505eff41-84c2-4320-9f8c-4ab43f946ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2357b788-750d-4eae-837a-1b7ed85966e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053b9912-ba3b-4988-abd9-d9cb42db3bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c964a857-1dad-4d56-904d-5c3c012db291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73710ed5-e48a-4f43-9408-3730484eb683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873467cb-1c9c-4629-9217-f1f08085284f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9386664-98e9-40f1-9d8c-ba6a75e73228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cacbf35-f8e5-470c-a503-a79474b2d784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fb7a3e-a926-4b5a-9795-75861907daa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd67a3b5-e0b6-4131-a8bc-fa447a1f952d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559ce274-cbca-4082-ad87-3bb0df83a04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2410f7-e571-4f5d-a255-26385b9f85c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335eccb9-df70-46e2-aad7-37baf5890d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd07820-14ad-4394-94ae-d908f1af601b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36597bcc-4a21-4607-95ff-8dfc929e13c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37becb7c-2042-423a-8a0e-3e616856695e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48bdc83a-1930-4bf4-a6db-6fa4a94ae491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d75d37a2-68ca-4b9d-91eb-ebc52d75e48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec92f5cd-91de-4b9b-97e2-28ab0c3deb1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d08175-e1b6-400a-af5e-3896d1382400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b9135d-19c7-42e3-a286-bd08344b6646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c6e2bf0-d009-4cb5-9cb4-068cf221f025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad459b0-3d81-4563-a43e-30d4a6ce6842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab4f3af-01e6-4c55-9c9c-27b6ecffd09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd8cdae-43aa-4213-8850-73377988a035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9153d180-4a93-4c4c-8572-e4ab25f83ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98423e83-08a5-4780-8230-e3d8a617eaf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39acaae-d40a-43be-83b3-ed6d2587f22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcd1ef6-d4a4-41c1-a4d2-f78e1d646b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbf6be8-67bf-4745-8836-10358a8973f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8c9df6-b558-4921-9bf9-a8096bc64bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a07f9b-2060-4116-b40e-ce994359eeaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5512b63e-5958-4db8-a6b6-67e675fd4f5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.19.109.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9365e8-00f9-4167-a21d-d5d79601e772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7433d44b-321f-4ecb-a7cf-3ee71d56fda9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e1d8a8-ba37-4355-a8b6-d16be6f427d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61fff6b-523f-44c1-9383-ffba7701b8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4159c9bc-6dd0-4f63-90e8-da1d73b212f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a5f736-06b3-4479-a356-fd6bcb795590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1354833-4bc1-4f8d-a8c0-440b076d31ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c20433-22c8-477e-8d64-a49d87601919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335326fa-7463-44d8-9ee8-c234b0265ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cff164c-91df-478b-8bd4-1788501fa2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53edb06-f9ff-4db9-a497-6fb032a6d6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e518d08-2e0a-4ddc-b9b8-76ae1549feca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5057f939-1aa9-47ec-876a-861b4bdd8ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78bd9b6-4722-4525-b701-84e9610995a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bb7d4e-9a5b-4fd4-b9d3-7e052903bd79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c6d99b-49c5-4e40-820e-a3b239ed290a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78888802-4a6e-4609-a534-8583f7e674b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11965610-ea1a-4adc-8c37-9b07e315f0d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5847b8f-fbff-43c9-8c22-01b1ed1c60ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64b1346-c454-4286-9dd9-a352ca81120e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b8f799b-080e-4437-84f6-c77f501c37c1", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bcc070c-3242-4100-a98f-aec2743cced2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f0365f-7aeb-44cc-959f-e11fa7cf2397", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4c14ff-d5d6-4bbe-9041-148ea61f67ee", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c37b809-746a-4357-9943-7f6a067ac7dd", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5718d2-fe62-492b-a224-0124410038da", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f8431d-4753-4ac8-ae87-3570819a06bb", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e0c2d3-58cc-4d6e-9cc0-9ca19d06016e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feaf03fe-1ad6-4150-88f3-137bcc08ad1e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49294b0-35cb-4d8c-8299-bca446cd0ad2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94117968-92f5-422a-9973-bcddf296c1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.120.230.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d25b59-0226-45bf-a9da-38d03a8c75d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14419577-93f1-49f8-b333-0887633b15cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.159.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a731d1-a193-4229-b48a-39d7232cbee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231f3857-e7da-45ea-b393-f6624ed0c725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889702f0-458f-4401-a4d4-36fbe81589bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9273f005-c94f-42dd-8d9a-a0ff0acc9d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.12.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf8da75-5c17-4ae4-96c2-b270ba853496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.48.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af14efb5-f16d-4cde-b229-9d9a1630d77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.49.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3b40eb-1939-496b-bbe1-c9536bc8e45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59fdff14-77d4-48c5-acde-f8c2bd68f8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de893ec2-4a43-4602-9411-596c0210efda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09d3c62-8e8e-4fac-acc9-aadde0d241b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8498c8-2f7d-43f9-9294-3d00f163f5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76054572-20e6-48ca-b44a-82a065c3d05d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.213.3.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b84de0-ffff-4290-97d9-f88eb4d2a155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.64.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ddbfaf8-ea7f-42cc-8a7e-5b7a93575fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.70.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7e2486-8aa6-449e-b2b8-a3bb0b4e0e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.205.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1db4ad4-46ae-42c0-8a94-760bcc0d0f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6af098-722a-44e6-9a9a-7261bfe1d4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041c3b92-27a5-410d-addb-2029f28b2e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2876fcde-6ba9-464c-90b3-fc00216131ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffdc3c8e-ed9d-4380-bf17-804a24342ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b77ebd-fac9-4491-9d23-1d18dd1babb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa51381d-7cbf-4a96-9978-c180045d1299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a8ce7f-e7b9-46ae-9491-0a7a2687bfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45c7dc3-73df-4209-a65b-326ce0fc13f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a41feb-69bd-433f-ac65-bd45029fb53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c5708a-dbe3-48a8-9fe6-e34537327614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38ee87b-3a6f-4d01-a750-cea2d00130e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a3b6e9-368a-44ab-84d6-4cb9c3d08992", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.204.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a928cfd-257c-4c57-b8d2-0d8584cd53cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f73e13c2-676b-4296-a1d4-6fad566e78dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b1b431-21ec-4930-9288-e49c00ab9fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75ec44a-6e4d-4f96-9909-535b30651fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45626fbd-39b5-4f72-b0c0-464aa64d0f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c92f9f-3df2-4ffb-b25f-7917276200fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1596d7d8-e6f3-4030-90c4-cf7ec5e4a4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7469cd3-0e84-4ed3-89b2-b3456d3528b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44049e8a-0a88-42f5-b2b6-61e9087fa70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515de7ef-3589-416f-b2bb-555d36e7deb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f73eb69-06a4-4cec-8830-2b3818aaebb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44884dfb-712e-4149-8bf2-a82fba2c4ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4fcef3-2dbd-4e09-b1ee-7d183f9c68a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428b68f6-398f-4ee2-b6d4-8f2de951e5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1908e8c-2412-48bc-8b7d-9b280c207c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fda3e3-49b8-4d9d-924f-a06d0fb837b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.154.211.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49ed072-3322-490a-b630-e5e76a7d83ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b3536a-f708-48a6-88a4-f50cbef4345f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851cb1f2-9720-41a5-a2ed-0c66532520ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfd778e-c390-4493-9beb-fb6ce2972035", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef6fd66-eeb6-4d58-9dd5-326bef19a46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db19c15-9767-47b0-b94c-f1ac85d014d8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fd872f-55c4-4de6-9dc9-44d427872fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9828b52-4afa-477d-bb95-cd8b008e1417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da724a6-f40a-405a-8200-3c5545064c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc78c38-45e8-436a-9415-a99bcdd43d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2c1e4f-35d4-47a2-b1bb-1dcc0ae2a992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9b19f4-37ee-4c57-bec7-1dd7d2198560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5c312a-fb05-41cc-a6c4-82d8fbf66fab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2329ae5-7ed9-4475-b905-a73ae4d2f275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a1e2cd-d662-4d7a-8e17-110ee055cbb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2ed863-54cf-4721-add3-6cbe1e33afaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec95c235-1662-4327-90ea-eccd1c0fc6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66670680-57d3-4d3d-834c-8eee79cd81d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0647f7f-59e6-4882-81f4-610c9efe504d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72350ef-2743-4a00-ba2b-47239071f5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7feb252-168e-48f6-92af-7bc271c14270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa92e9e-9b66-44fc-a5cc-44db7aabf394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d665061b-702a-4dae-90dd-352bac760af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f48c88-419f-4d9e-b67f-3f42fd20dbed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54da8a3-9a79-466f-a5d3-f8312d35360d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1f8126-b77f-44b8-aa00-148ba5498784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b039fa-e66e-4eba-976a-539a8f1acf7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f400566-9bfd-4f9f-9c67-13169c3edf9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1930028d-5cda-458a-8566-46755e98c345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9fa83b-7d1e-493a-a573-560c9ad258a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402b1dc4-09c7-4568-bafa-d3f205e98b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88944f5-ab7f-4707-84ce-66fc0aa02b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fb7173-117d-49fc-9284-43aa5f6d18e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f144b4-e5a4-4a5a-b2d2-0105ae574ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab3a480-7636-45f5-a38a-cdfc20b93ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7edf046-7965-4780-bf02-a0185706d979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecf7c55-9fa1-4b67-9e23-5d12981d9079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6bfe30c-968c-4455-9461-f3704a73758d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833ef0c7-44a3-4d5b-a0a3-51d30c5a3e76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7623429a-1c03-46dd-aca7-5af66009011e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c07ef4d-0498-4188-b90d-cbb4bc921811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3a3242-8b08-442b-8656-fe14d6193e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--081bbc0d-4d59-4a29-b0e9-ec1ff7485862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ff3ef9-dd0f-4aec-9c05-066da04ffdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077b098f-ed17-4c90-a7f2-016ba22d8c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997ab247-52f3-4a8f-8b07-f99e705146d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d096c6-7847-4716-bc94-ef817df9ccd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca69e74-01e4-4dc7-b7bd-b545da63ddeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffcbd3f5-9513-42ec-aaa0-37ff3eebab0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa55de56-cc3c-40a8-9ca7-a1edda81279a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ca5805-b551-4d42-b1a4-d0d8107ac19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0354a1-2393-4a3e-8d1f-3ab224a839e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd64a54b-fe0d-4fa4-831a-67d7ef82bc60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84517240-bf00-4fcf-906a-73672259d8ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9938085d-02d8-470f-a5ff-00b3d71ed01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c4da8e-61fa-42c7-9a8b-0b8ecf81fe16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fef33c-8064-4700-8088-7fee2e94dd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d797fae6-3274-4829-ba5c-1d5bae3587f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbe82ee-0246-451d-b540-bd67c9e7f21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0311b832-5038-4902-8032-08341658bc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18820b08-89b5-40af-ad70-86e59ed529df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7434798-06ed-4aad-b0c6-ffa3d7eaee11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c21d8bb-363a-4a75-8b68-01a4fdf2dd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac6f124-48c3-4c15-9da7-3fa86401e216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869f569c-73d2-4bf2-b3be-e8a187f6e2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db83112-1f38-4fbd-ba77-09140058dc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d6589b-3029-49b2-9e10-489631c0ce46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.19.83.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09746390-cd2d-4abf-8f25-b08e351151ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92694994-8e1e-4dcb-a0c7-3a91d39edaf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7df074-303e-4d4a-83ed-f51802ab3365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83974b61-a85d-4576-b151-8a84e6f7400c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d85f77-ac33-400d-aa48-e467bac6d426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d32db64a-c3a5-4a85-879a-74e7882bc843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15879b9-7f4e-40ec-9134-cd45e6529556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95beac5-3654-4d1a-9ba8-f5dd3c0fa5ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4f55bc-3026-4b7f-8725-472b45edeb8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72edf3b4-7944-43b1-9e7d-520d3613d616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7351ec67-78c1-4a27-ba55-d7a6097fe36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f7d56e-5405-459a-a1d1-3caa4346427d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9908bf92-85f6-4cb9-b205-299f8482311e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dfae7c-64ae-471e-9ef8-75f5d2732b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b400feb7-2f46-408b-b698-dfba46acaada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6148db8b-d1c2-4ecd-8a3c-38d99d562444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22619a4f-aa5a-4ce2-9476-c4bfdb32614a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f269ca52-8d13-4d1a-9665-ff287d90a9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28df1e3-594a-4036-81ae-986d2bbd6a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b81c60-533b-4d3a-9983-7c48b290df09", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196973f7-1151-481e-a3ba-aeab0658c3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.3.220.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473a63f5-cd00-4f1e-9277-d6cba1ccf4bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fd253e-ceed-492a-8f00-ed0e09d121e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.0.3.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efd282db-3899-4cf5-93a0-f3eed56443ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.115.35.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b0c49e-abb8-4f6b-979d-9144833e4371", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.116.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994d2274-b19b-4a66-b12d-a3e54a2a2945", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.253.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7e83ab-b5d0-4e85-8f01-e59e5342c8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.238.228.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b213079b-e2fc-42ba-94f5-62a252784049", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.199.224.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64cbff0-8f73-453e-822e-1f43fa9da527", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.225.146.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b84664-e717-4f9c-8d9e-d549d7304817", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.251.249.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4264184e-51b4-46d1-9afd-f0330c50f4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.5.145.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a4050d-4f78-4874-8d16-b29965120aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.106.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b964d6-ff57-4d41-9b24-a64585eb2c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e09fe0-7f2b-4867-88c1-4dfed57ae9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42a9db0-926a-488b-b5ef-1d6fd0e58e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0815564-37c9-48c3-8633-47e909016e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bea5d6-d049-4169-8ccd-ebe6e7a1d615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e16342-8833-4400-9ab9-b838a95bab7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03af41fc-0d73-4cdc-8ff2-73f68b311a37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515df93e-8dbe-44d8-9792-2bf923961c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05a50371-d07c-4fcb-848c-306a78d09c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04019033-1c52-4aa7-8f81-f4ed96d206bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27000567-55d0-42f6-870b-f7c35d5bf6bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d8d59a-70db-4974-aeab-0c894d8707e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3201475b-9f77-4991-a99a-c37decf62745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6b494a-5561-4a1b-a88d-168b61168714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca06911d-cf06-4a90-a72b-6d122f587aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4681e2ee-7b7c-47af-bbd4-95fe4b676233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8d5b12-15ee-43f3-a01e-602369429172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4058f4c8-27fa-4b12-be1e-ef2313b5e014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c89744-4f1e-4fe8-80fa-e858714b513f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f99f7a-889f-4111-9086-6f4b7ef440e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d385a3f4-4baf-4a81-998d-67fea825cfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3340978-81bc-4dbc-a53d-b47a51f4ae81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2f0149-4846-4efc-b667-ce6844e31a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b08fa60-7957-4ff4-a830-5288531f6b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fd6a61-8dd7-43ae-9731-3564e4525b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a03f49-66d4-4974-a917-ad906cf783a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a000033a-6e7c-443d-9bc7-60e9fc0b1948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb453790-38b0-480e-9b3c-003e0da653bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfff3d5c-8f99-439a-8e78-5aa59d57ae2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1864156b-c071-4303-9672-707fd495ae13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d38df2-aa86-479f-8d5b-610068fb241d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bb69bf-a1db-4489-bf3a-bc61c6f7a8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6b5461-d029-4670-b4d8-03f4354547ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9dc444d-2af7-4711-a67c-412144598e51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9410c1a6-340c-40e9-89f0-3a57990aaa08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8acee30-f6fa-4e28-bb4f-a5926faad49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7742ca-be05-4993-b27d-b1991cae4c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5efbc1a-9b8f-4b04-9b7f-ad68db63b1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f70b25a-ed79-4452-bba6-555b1e8cd113", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21984cfc-e809-4b89-9f7b-d78e539b8d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac6194b-06c1-44ca-9d79-c91f4d24c12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f732b4a-1e8a-43e5-a126-2baf36a78077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e136d8d-56d2-4dd4-9ef0-6175db47e271", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f06be14-aa6c-419d-b1cd-ceaa15db9364", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee9abc9-5ad9-4fe3-b6cd-b2b82d7a46e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--914f3ba3-8230-460c-915b-37e9c5a624db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bd28a9-7a98-4de7-9c22-4bef8537d2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4448c589-0339-4385-9e64-d4d79b96237a", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c37e4d-0375-4bc6-a43a-7195c6b95155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d942e32f-7a2d-49cf-a21f-9f772d06ee1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceea0079-8fd6-4d09-978f-7ddbe10e1183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19cadb3f-c261-45c9-8e32-167fc901c449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95c0fca-ac39-4f81-8482-2f507154de53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46ca97e-f53f-42f8-b1b7-5662b19ab9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bb3402-4082-4105-9615-847ad4c3db06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b37f545-ae80-47e2-a038-d41c32c2f790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5258741e-7273-4281-a1a4-bc76ec8110a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--634638e0-6129-40f6-860a-ca5e2bc09aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6a85a5-8be6-4d5e-9748-d7eed0513021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344eacd6-e45f-41d4-9453-e47c5aa79a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1bb34e-427d-40e8-aa02-407649ac5e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05110000-e05f-4426-972f-ee0a2ad044aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6daa18ff-cc09-4cb7-adfe-83fd6b96380a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de99ace6-04d1-4a6c-8dd9-9aa488e695dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc10d9ba-31e9-4fd6-9ed9-2b56a2862801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76bf906-c7f9-474d-a6c0-6dd997f9d6aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11097dfd-c24b-4f3e-9853-b8182f7dae94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf19aad-3f3c-4a4f-b246-5983532a6c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcebc23c-83f1-4f6c-858f-06bcc5b68af6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d737ea06-2b5c-433e-a253-06becdf38857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861dc3ff-fe94-41af-a5f9-55bfc748b5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cb532f-0dab-425d-889e-8e10c6b79f68", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436d36b6-d8e9-4170-b936-140231147216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0e3699-ad6c-421e-83b8-20380c57b62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfad18de-653f-41e5-a4fa-9d6ea359309f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4452ce3-b986-477d-b6a0-ad177aa8caf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ffe78d3-0b55-4332-b3c5-4d910bbf18d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5244722a-1c71-485a-b6ba-fd062a0616ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67ecbc6-1fb1-4b0c-9c1e-41f53c82968c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5ed537-c3df-4d09-9e09-789c416fad39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc1ceb7-99f7-4012-838b-05fb1f4a29f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774b2984-cb9a-404a-a699-838e46b89709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9358037d-da94-4f10-b8fd-6a642261b86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1565f607-4047-476a-9167-48c7e0d8cd52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33771f04-0f55-4a65-841e-0ec1c5cbdcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afc65c47-3ef2-4454-b0dd-e2e718eb72cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb017b0-8897-436f-acf8-541ef0556877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d601bb24-1301-4519-b3a2-850c1de40b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e55b44-3cb6-4bf8-8792-1b6f311cbdf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff700b6-4122-4839-8004-94d2d0a43c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ca6266-7181-4808-9b09-e9085fbb0814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdb47ed-ac15-4ee1-9883-d03e6485f809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f517f9e-6594-4790-824c-5093e3783d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a035cdf7-963f-4785-b851-5899f0809b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8af2d0-b3ec-4c09-b72f-31bb7d3cde08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7eb5850-274b-428c-87e9-007318770a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057127d0-9fbc-412b-86a5-d61ab16068df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb937ab0-2386-4327-847f-0b31171fdf31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dccd84-8a05-42d8-a165-6ec0d19bcb65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efc809b-e0b9-4a51-bb3b-d6d89e6402c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6f37902-c73f-460d-aae9-2aec33fb3143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd30e08b-eb92-4489-a8df-2e1f426506bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083d5f77-d350-493e-ae28-528200af0dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33aafaa-29f1-464c-877c-95025a138a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.91.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ee5fce-73f6-4060-94e0-3282d0096a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be112dd-6a0d-4b24-b07e-708e6e0edc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b970fbf-3691-4678-9429-c8d4b697a2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77c9c70-3e90-417a-b49e-d40c06501aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd9669c-964f-4ea3-aea2-e92c2b1694fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.52.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04f993d-fe24-4817-8a84-2bd23c1565e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.55.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4518adb-ac3e-4c0a-b041-8104016eca0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.60.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dbc8fc-63eb-495c-a2b8-104858a48536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.62.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c76a76f-fae9-4f14-a686-9dcbc1bd46a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d63d04-ea75-43eb-b865-f60997d682b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3a2943-56c8-4e4a-b2d6-71ead61f56da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a5bdedc-ae5a-4a46-a5bb-e95e6eaa7f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d300f697-ba8d-421f-a1d7-2cb7c79b99d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da31e67-956b-4c45-a490-36f059cd7015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1af390f-db3c-4a61-a4b0-5954022a6141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8128a9e2-9c08-424b-af84-10138ebb5e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78580164-bf53-4c36-a3ab-31b73b94c4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9830ee97-9d5f-4f80-a2e4-53225b460c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ca7799-b4d2-4cfb-9342-12e2a8ee1706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9978f33e-40b3-42fd-a9dd-069b59dd68c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5844a7-db6d-4314-8279-395145e4f642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9aaf70-9f28-4754-81a4-f3d1ac8485ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2026666-751f-46fc-9694-efef5c1b832d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab17cb5-446e-417e-9300-8e3a92424623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deb0ab5-2cd2-4583-94ec-5520e24f5b0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8814e142-c5d5-4f8a-9a74-af510d226f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd86e89-70a6-45f4-a431-f246a50922c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95effd7-aea5-4562-91eb-57dd99671a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a130b93-5501-4506-a7fb-d2cbd5f6d46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335acfe8-b768-49cf-ab9e-6a4f7db7ceed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc00649-839a-4edf-af72-3e835cef5cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd4c903-b496-4c3c-8f56-d42f527253a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4841956-5976-49d0-aa95-f0c4751c89c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf5c1af-93bb-444d-aa02-24bf1c53180c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8458a2b7-42cc-4609-8e11-2796ec9d66c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0207938-ad24-4e12-b9c1-6338fb5256cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4c9bc0-36de-44c7-89ee-fb4fb504cc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4498151f-b6fd-4aa5-a65f-6ce6b8fb86bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778eb9da-7242-4309-aa1b-02758915bede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d2811c-f3cd-4913-9040-f09573212ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b17216-2e63-442f-857d-e6980100c8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2cdf01-a8b6-4f37-bf06-93b21e4e6874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a321396b-9be1-4756-aa38-8c3ff38958f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03885d5b-7402-4411-9fa9-11c057a2c9d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80930f14-9a5c-4049-a13e-fd1788595a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86ca20c-447f-4eb6-ad4f-09e572058647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede549fd-9e89-405d-afae-72ff1f67ad06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d3d46c-762d-4dcb-b17b-8c86a32bca3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17704ec-3f4e-4917-82f3-0bf58dcc2bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--010d9690-ed80-4ee7-96fa-c8aeda2046bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdd366b-7061-4d20-a4e7-bcf60a0da9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.91.221.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4cc8a8-01af-4426-926b-ba94ef033a52", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.50.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4244254c-71b9-4770-9d5d-e0504e87d3ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.63.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea997460-c481-4192-a29d-d140678cc3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7e7d78-9e5f-4899-9524-c7d600904b78", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65370f3c-e277-4818-add2-715b5d6dddf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c39dd4-0aa5-496e-953a-929a2c1b1f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b5b9b5-bc38-4d5b-a2d8-aac48f0fe4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.117.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1199299b-d5e4-4293-86c2-15427edcfacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.92.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139dffed-ac68-4297-9174-639b59ccc185", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.104.200.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96e26f3-6005-488d-a9c1-94238435bca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff527665-2043-469f-8248-8e7a6913ccd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.168.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8570c319-c421-4d4d-b6a8-5597da1b658b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.186.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0008783-1ab4-4630-950d-75c3a35945f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8160d3b-2da6-498b-9a9f-0a013e50e924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a872ee-852e-4a0f-94a8-5933328cdf7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.202.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3069094-f10b-4f6d-b057-b77edacb738f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40457af4-0c5a-4511-8080-c631af6961ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f35671d-9166-4829-b2aa-7a51edc12b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.209.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c9e1cd-dbc6-4a66-b782-0a4c2dea1265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1340eebb-859a-412a-b0c8-c41b3820b421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b0f6843-34c7-443a-8d86-b0caabc9efab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff379b71-9693-4bbf-bff3-1ca5d6e0387a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.240.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b3aa1b-d3c5-4074-b3c9-13448db5e39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.139.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb5502e-6d4a-47d0-9966-4c28f656baa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.46.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7f3ad6-7e44-40af-9ba4-7cddff3b91a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.49.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49aa0893-3c97-4fb4-a76f-31199bc4466a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.88.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7db926-ddaa-482f-aa88-1c8d2f02ebf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.153.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3a726a-158a-46b1-844a-c991418f60cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.187.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97e08ff-a7fe-42be-8869-8f81334b2d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.187.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e2f70a-5311-47c0-a54f-a395b071e5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.219.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aad428f-8b94-4dad-9e10-2cc519723313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd4c94b-14f0-48c6-b180-c6613d902503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.83.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a0981d-90f6-475e-995b-1cb64e03cd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9825af54-3b30-44f2-a582-b6c156cd1cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c01714-468c-48cd-8f46-62ed7e57bced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.160.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55240736-89e0-42e0-b798-21e8e18eb32f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d04b2f-e2c8-4859-93ca-ddcbecd156a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.162.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d147bf26-c96b-4b01-99e0-85d676289ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8cc790c-a3e6-4554-9057-2690022ec65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.225.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d02fb2b-65ed-4665-b7d7-64a8af4968eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5967246d-4096-4fb2-b3a8-67a485ea51a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63f14867-1690-4a9c-ae54-1b00ed36b834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ade79e-08cf-4c3e-acdb-542a16ac7405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f285b1a6-8bde-46b5-b0f1-0b4e58a9a7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a18c232-c2f7-4d07-bedf-342da3e26945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e485f32a-1826-46ce-a399-ad2283a95ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dcce0c-8d02-4c98-bbef-5c8fb5c25177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.16.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cb5b45-4a1f-4948-ab81-ec8691dbab01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17179c06-4c71-43aa-8eee-92782c101b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.20.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d212ac53-d8f7-4b68-809b-cafc896b48de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.25.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5470c49-95cd-456a-beb2-5ca28ca995af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.33.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aaa0698-6f00-4640-ab0f-9b757b329bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40c9387-dd83-4046-ab7e-e506ded30831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.57.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf7e724-e68a-41e4-a4fd-24f877ecd571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20705f94-e488-4f3b-9af6-108b8897dda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.60.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea2e637-97e1-4858-b352-0727ef7fdac0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed412104-4408-49be-8986-da8c3fce081d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7e94f2-914a-475d-ae52-bef9874a0f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b8fee6-3da7-4d28-a1e6-cab07298b58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a82c0c57-1007-499a-ae49-4a0e57b1e479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5d5cbd-1d92-4eb7-99ac-8de8084f568e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175b09d5-b1b9-42b6-a5f1-d0ae891b6be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8030aba7-3a8c-4ebf-9160-4071bc21d82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720afa68-d300-491f-9b22-28eb25f56dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94416de5-bccf-4d8d-9b85-b2543a3add64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a051ab2d-4a5e-4a89-89f5-25f4c6ad04c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54ac6c5-d12d-48c5-8ea7-e85cb01ba7de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74dff32c-d742-41c9-8aad-e4919dc5320d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646543bd-96e5-4d75-af43-cb1b72e16e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96fba71-19e8-461d-accc-bddd3acaac95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34996bd3-8be8-43a2-b5ea-53f1f712d388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c619db7e-fd86-4589-ad8e-72775447f5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496e037b-a2ef-423b-a67c-08bfe76066db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f210267e-a52d-44dd-8914-23cd389aeb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c05fa2-a9d8-4daa-b191-8f828d7956f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdec2c7-1536-4846-839f-f54560a2dd80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5549a6b5-1e8d-4b52-984f-d75c8cfd90f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2821770-cb22-41f9-a07b-9383b81d054a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.15.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffa1a05-9b67-4ef8-953e-e15ef2a6f1f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09803577-948c-43cc-86ff-c01fc2fed906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b0557b-fa1d-44a1-8939-4cbb314a608b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f69709-a1ba-4258-bc81-43914b54149b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9831d8de-27e3-4845-8029-b6d2b27002c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0c6c34-ff69-493a-a45e-392357c102a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638b5f7e-1585-4309-a5aa-5ba3d97524fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cb3a446-9cee-4ffa-958f-8af2650b83d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29b8e38-42e4-4522-862d-e2d48836d5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475a4155-638a-4a7d-a6b4-f0fb0b640e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0d9f0e-eade-4813-b9dc-e928296d0eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651cd632-2078-473c-94e7-5c1c261dcee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00adfe34-906c-45d6-b21a-0465fac0c3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1313a4a-55ae-4468-86d5-1b2269fd50ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.108.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbb75f56-4b8e-4651-b2b0-110536f5886e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212442e0-59a2-4ce1-970a-163e945cafee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5866b90-48ff-49c8-b888-38aed42397f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9960e0-08b6-4b46-93cb-5e56566e41b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfeb80d2-47cb-4459-9f82-d4871561a5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.83.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70adefd7-1fd1-4a66-8bdc-784036c46483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db526837-d107-45e3-86ad-4a20c470e3a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.91.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d40147d-3be4-469a-8a3d-57728c8f40b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.25.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b939e71-0b55-4eda-85f2-46564b6d8ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42924f1-a169-4c9c-9e81-1799b0ac2661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc71ddbb-cdc3-4182-91eb-f37ae43f1660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbae8c7-3f2d-4cae-9152-2161681a21fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8beab7ae-812a-45ab-9193-408149b354e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.9.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be30b35-c642-4d86-968a-bf29c8d687f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.71.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077bd26d-6802-4a85-9985-f8185f9ae812", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.173.116.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1dcaae-37c7-4536-ae46-52ce423495f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.197.236.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9922467a-c779-4a22-8f12-128e585d26f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.203.102.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a06de36f-2e7b-457d-ad44-1e54feaa4832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.212.59.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39217730-9daf-418a-af59-6e35fd66ef6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.56.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eedb884-770b-4428-8fe3-db8300d44f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.58.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4584e6-c57c-498d-bec4-817600297245", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.229.115.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e64bfd-cb0b-4d9b-99da-f5829cdb22b1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.18.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf04c1d-0e26-4ab5-9dd2-4dcbd83fbc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.33.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da16ad41-ccb2-4ace-afcc-767fcdb76072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.35.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45d011b-85e4-4123-b1f2-0186d1e08699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a55ffb19-aa4f-4d4f-a9cd-715348d1e383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.217.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--306b1c9a-5b02-405a-97b5-bb7b13cf1b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.250.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d16f31-338e-4563-95b4-3ef9af35fbf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.108.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d1b744-ce65-4f7f-9f87-013034e4ab4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.245.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cfc9886-bf74-420f-b1f9-dde4242d51dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46efa445-b2bd-4cf9-9d51-592458cc7d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.84.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f056c51-dcb7-4fae-a0af-8cd06246f539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.88.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f82038-55b9-4155-b247-68509e9c6143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.97.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43e5e97-2f87-47d1-a8e3-299f4c014c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.194.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8eccd2f-2232-4f7d-8817-5699a17033a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06f6f36-9aa6-4fed-b85d-f99c8d02c00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4247b1-c679-430d-83bb-c9e2636fdcf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d1fa8c-92cc-474d-8033-38a2ec5432ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c3bb28-1a29-49aa-b7b8-523e911a86d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc90f1ef-74db-41f0-83a0-43935f3cd853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee6c346-3a72-4476-815b-1c4aca587e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d665f5-e18c-4281-b892-c7cc7633d016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfc27ab3-2d21-4ec1-ab50-f69b2f092026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d2315a-cc3a-4dd6-8582-601b656ab1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec99d2c-50ce-4763-9501-c9f38bc8af7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c34f05b-9305-439b-bd18-c45b32068bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27148e8e-c929-444e-8d9d-abae65d24f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6891b595-d255-482d-9e8e-73e05b9a1a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b677bb-6c7e-4680-8a32-d8c0bf8bea05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408f11c2-c810-4f80-b97e-7abef3c10780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a49c47-5ce0-4974-8fd7-a45280e5e969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.136.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d02048-c069-4fc8-9deb-c984078eca8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d044d2-c9c1-46b0-a728-d41fe2d59de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719acdb1-428a-4ede-b79d-c41c05e73739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff47b6e-e659-45be-ba51-f5e8514287a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a62fdc4-1772-413f-9eae-d5c09f39a579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.145.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e56ee6-74fa-4ca4-b7e6-c1083f770155", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.152.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4db1aa26-ff31-449d-ae4a-8d51d02cb32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1305d2ed-31f9-46bd-9203-c007f3c25e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abed973d-4692-41a7-8363-391b0e61fc66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38926a16-2400-4af0-8517-7eebcdf68270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.185.255']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded0f54d-1cd5-4f9d-a8ab-79471bc4a799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956e5c37-48a2-4083-8b5b-1036dff53b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff705482-5804-4c0e-a3a3-96e04c01356d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f750da-49b6-4d1d-8565-d50535dff565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4dbc44-9b6d-48d3-95aa-e828ed55aad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd7101b-ccdf-4e86-a8ee-a5f262a8c604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2451b25-9079-4f0f-9faf-bd4ff9a28be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7335b06-6176-4384-950e-0f3cffd0692a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40487e67-fc2d-4e13-95ef-6adceac516f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f72cd8-4284-487e-a055-6862941cecef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c9c6dc-f3d2-4e20-8040-6ecdf5bcd3dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfd2024-176a-46a5-bded-57179bc20046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52982352-31d2-4af7-be85-6b7243f119d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54170d4-f1de-4e08-b28b-2882c0928df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007cd4b8-4d00-4246-8251-24d502f82a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba6d2a6-832c-44ed-bc51-5afe6b6f49ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5c24e3-6e65-4ac0-bc6d-8e7e791a0108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcad80d1-a5c9-46aa-88b4-140f6a3446e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce493ae3-a06b-48ba-884c-5a776098a45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27aad664-6264-4cec-b53a-8a9be4fb24b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6950c37-f6f3-4c22-9182-359aea23384d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c959c468-1eba-4e05-bd82-798f2e01b377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.202.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d54fdf-f754-444e-a50b-d59881ed492f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b992fa88-9528-4594-86ba-f9785500bfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.105.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3d280e-fe92-4ffe-9a55-d086aa527eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6b379f-f2d3-4190-9bf0-d8a5a3388697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.46.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2d889d6-65dc-46bf-9d29-d308c65e5a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.82.167.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15e29e0-91c9-4f65-9906-36f9bd3a7f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71793dc2-85bb-4952-a0a7-d572af0d038d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e74368-d948-4e81-bdc9-3cf81263ee14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d22de1-ebdc-409c-b556-6fcbaf85f6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c52bfe-35e2-4928-823b-6306053bc4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.23.126.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bd1f99-6391-4a2f-8000-1476c60adbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.56.131.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f50d9a-4792-4b57-be0c-4d572de7f176", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.186.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907083b0-d23b-4ae4-8909-de22776f34ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.95.221.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2697b4f1-5914-4332-a1b1-9f0217881c7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab95085d-08f9-4bef-9ac6-7948556d0167", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.191.51.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9228d0a9-492e-4173-9b64-0c38dca3a791", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.210.176.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--329d19b4-8bda-4765-8d5c-2146a76d6462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375aabce-d7a8-48e7-bce1-f429de184be6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.155.18.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647f334f-9cf2-49b2-82e1-48e68636dda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.183.141.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4016f153-7aed-4d96-bf42-629db83167b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.51.89.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8f6f12-2eb7-4eea-941a-883bf70adaf0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.145.143.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4de0453-f2ef-4f2b-a3ae-be73e520b8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.150.107.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d69e7b-1202-4d6f-af62-cc0d41d68d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb37ed8-e87e-4535-b3e3-abc808fe9845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ba9a4d-1029-41c1-af7f-11bc8c8ae6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963d78b8-27a0-4f67-ac98-8fef2afe99ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.185.127.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef442c0-e4e4-4a90-8620-3fd8ca53ef27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c8bc89-a19f-41a7-b646-36591bb68fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a992d48-a4c9-4c64-80f9-c5e0b8479567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84da9453-e7f4-40a7-9067-7c2a42859c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6727505c-45f8-4ace-82c2-5fbfc23f4b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d615ca9-79fa-457b-a243-03533559ea02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78d8358-e08a-455b-97c8-b3484c29a2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3be944f-755f-485a-8a3b-cf638a6297c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5d5ffc-2cb6-4e52-b500-76c366424c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf6edd4-3f52-4f55-a47c-fc822a7746b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c0a42a-1029-43a7-bdaf-fc1e71ff8feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bd4d57-c9fc-4852-bce4-e8d1bf4275f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76947eaa-8778-49d3-8d62-eb090f1c5eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4602910-6ecd-4c8e-aeb3-a08419819d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f0efa7-ccb7-42d7-adfc-e230a489f825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1de2de-4200-4395-89e2-801c4d2cca8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a18534-04f0-4b20-8746-117215e6cdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2a4128-5af8-4157-a780-edf83ec16951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f0ad75c-c744-458c-be97-af675bfaa4f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae786181-c3ff-43fd-bba0-fb5a7062d0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d21184a-2522-409c-bad3-3d74b60e4936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589b8117-2573-4091-bed5-413be6f14e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c3471e-4351-4560-b9dc-4da26e724cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af95fd52-c3d2-432e-9335-7081b25444f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed1b3a8c-6817-442e-b8e8-5cc02ac695af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a6e96f-82c4-45ee-ad97-bc49104929d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdd013e-9155-498a-a125-6dd827f1f6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663b8bf0-db23-4671-8548-5e5ff17f20bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adacf47-5170-4b38-b015-f557153a7ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529ead80-533c-459c-9c1c-c29aa8d7dafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947821c2-f120-47bb-bbbc-b2371c24e069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756367bc-c278-4f68-ad16-1921d2c0e6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2514addb-4a9d-4ce1-9f14-4dbcf705a5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b4d4b9-92cd-4400-abb8-2d355998422b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdfb1f1-2e60-40c8-bcaa-e25d6cc62ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6574cdb1-1b37-445b-bba8-d833bac59312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47fe5671-766d-427d-aca6-f749444befad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b9a055-147e-4708-8159-5360e2d4d972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419c517f-5d07-4b54-a705-3035561256ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adeea02d-1acf-43a5-a409-d533aa7e32d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768e5bcd-e1fd-4866-8049-1d264f453b1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab53d84e-9fd5-4860-9d5f-f109740ad5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--965d23ea-27f1-4c18-bd33-0b14ae598255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5495c00a-1467-4207-8780-f107200ca462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57803d3d-0ed6-4868-b668-99b4afb1452f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e158f07-40a5-41ec-81ad-7503cad50ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151aeaee-5710-4953-b9d5-5f1e5730aaae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c20b9d52-95b0-4590-ba7a-f45d1d8b0797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce69cd8-0f6d-4a22-bfd8-bb463e9d0e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1894195-3fa6-4d6c-8bac-d79d2473d566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89000bea-5dcd-4a42-b9b2-4d044c5a79b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71150306-07a2-41b6-bf34-67334dbb9cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48f4997-9610-4c9b-b0f1-dccb68486772", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d120f078-f52f-419b-b883-fa7a6b903ab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc531558-6ab6-4a6d-acbc-ed809f473356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb6b4b3-7813-44c2-88ab-3cc0fa5fbdc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cb4073-9f68-411b-b006-f230d7a181d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b69f9a1-72ac-4611-a9d2-7bfd98b45d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfad20b-752e-4322-bf74-152be7d815d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4cb691-261f-45fa-9424-b060bcdce841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18bd55f-eded-426e-9de1-1ce7c41a582c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6941ab-4f91-4066-badc-c5169f5d6247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248ece5e-c66e-45c9-bf7c-97777b22f3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95324cf9-3a9e-49a3-bd8c-9d141ed10d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfadadec-cc5b-4021-a232-1c53b2f0fa76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b280fda-3ad1-4f25-8d6e-49bed0743385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0bdaed6-4598-4063-a0f7-5b6e107976c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe42d14-c126-401a-844c-7af395f172f4", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5e0aa20-5e05-4547-8aa8-c9b3b6a08d1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fa67a9b-68ee-44f5-a49e-d011bcce2e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3bb9c8-9d4d-44d4-a16b-ed00378d5b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d63b6a-1bcb-4a01-9505-5fd78d2178a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e367030-6d82-4689-a865-fb37b543a124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78669a1-b9c1-4080-b732-b7dbe83494ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a68285-e25d-46cf-9c34-cbb22f1cc7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53088d2e-a3c9-4a4c-ba56-75e07d8ca483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506418c0-9911-4579-9efe-fd288d0ab7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda2f5e8-48d0-49a6-a06f-64457d8ad5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110a680c-97aa-44bf-bd43-2d879347f2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca16b50-273f-4e7d-9260-801e61407ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f733dc6-7475-4f76-bf5c-21f4eb4edc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8866789e-1cd6-4505-a5f3-6a2d82a3d64f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b92c1d2b-2b04-4e17-b61c-87edab21b9f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036404ea-3133-4be8-8bd1-c0d2c82b6162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a92467-730a-43c8-908c-8dc5e07efcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594cf5f5-0c68-4561-b6c1-b031f0ee79ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca6a9d7-34c5-465e-b8b9-dfe9d4efe11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4f9198-20f0-4240-92d1-b6fa1e4a86e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa42f7c-dc1e-458d-bb34-4be34fd7a5c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47761eb-2b20-4701-9262-1b8d0872c590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ce7d81-88ad-43cb-8050-19719264990b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f90aa0f-90df-4477-952c-4a880c4a19d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fb7dbb-0a1d-450d-801a-ed4f6e655bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfd33d8-e205-4c69-b5a9-5eec95f2b22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1336e297-2b2a-4bee-b9d8-e94041faeeae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.174.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc1a02a-88e1-4f77-9f1e-9bff7612ab58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.217.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ac32e7-d27f-4324-881e-ffdb85ca6a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.5.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6e5791-10cc-4b61-ba7c-838769629b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.58.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b1e2cc-9f40-4e21-9db8-e077eb57a651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4587261c-f835-4059-8e1a-1457bdb134ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a9a6ea-44f6-439a-a2f0-aaeb57263721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.228.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06d9577a-299b-4c1f-9b38-71ae1ecbfc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.237.100.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf827119-b807-41d6-8289-351230c9d678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.196.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f8156da-4237-404b-8fc9-97c835aa0d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.10.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bcc7ad-6255-4ff1-aa1e-b85f63467da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.17.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7e43b4-9e37-43f9-8235-a193d5d0872c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.23.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec70256b-647d-47d8-9ccb-683fb1bcec4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.42.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684b16e7-ce1a-4e3b-991b-ad719543d139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.64.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f09c54-b98c-42e2-b7a5-4b9fb319022b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18564407-0d17-43f2-b490-29609e5b1552", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45d050e-6d1c-4173-987e-10cabe243495", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea8cc14-4122-4c97-8693-e76187ef56c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f01f77-1f31-400a-b005-64b65593bc27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4868b1ac-d71e-4e93-ad31-20a3597efff2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1aef9eb-28fc-4591-9b20-e51d7c497540", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adddb110-9acd-4550-a16a-d984cb1d8235", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e5a4f4-54ea-4d46-aa42-4c046bf845b4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82296710-4ba8-4a29-afde-0f5d9610a807", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c884b4-2947-47cb-a61a-7167cb7a8271", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2d7fd5-de4a-481d-94cc-912caefc85e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b325733-3c94-4a7c-9324-444d0bea84ed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac86167-6222-4549-81b7-47fc7b61269f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e86432-038d-4aeb-94b5-3573c9a85a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8302b096-c616-438e-a8f1-379e495a88e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee816e00-758d-400d-b0c0-2d07e19d1bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bb1713-df23-45d0-b123-761cd05bbf0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec84509-d0c9-4554-a2a1-25456f4479c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d2c95e-720f-4897-9827-36effff26919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82182584-a50d-4915-bd65-0d06089b7a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a786ff-fd58-4556-bade-9c0f5e603210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989a35dd-7fba-4d57-ba1f-89f7adab5507", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ed7ece-d956-498c-94a7-8162d05f3aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6a4175-0c0a-427a-af7a-eb5992571f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.45.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad186b09-714a-45cc-b87b-5e1b4fbb5f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c59193-e9c1-4854-a31e-e9f3e1da32ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.57.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473d1adf-730c-4d9e-8593-51752fd35437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04861db8-07cf-4ab8-b2bd-ae215c93f7d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.243.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a613dc-db9b-46c3-953a-c6b6ac1a43b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.249.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62466b0-45aa-47b9-a45b-fa7e6b292e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6069161c-d867-47cf-8da4-d0c5963f739a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5df877-2461-4a84-a547-b69dbb4e0351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f41bbbc-076a-4a52-9683-686748450996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.105.67.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fdbd590-a201-4d37-852a-4e8caf247fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.171.212.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10441ad9-f19c-46bb-b71e-d82538ea8fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55fd9652-d448-4cd2-abc4-e1d0dcecbded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f2a5d0-de77-420d-9c18-89ca39382366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.149.226.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f08fd80-4f0a-41ac-a57b-9be5ac194c57", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.170.168.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a305c5c-be2d-47dd-932c-bee602356abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985da7d9-b544-4fae-8140-2c7d05123037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.201.246.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4749e4b-f637-4a27-b307-cb48f7496ce9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.221.196.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd698e87-3176-4ae9-978b-da059167e581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.37.177.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--667b50c7-d0b5-4d95-aa12-4a8d91fc9285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e85207d-a16a-4fbc-8882-ee624dd4662e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.46.188.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fe5fc0-a1fd-43ba-a712-59ae5b587675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.100.67.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d6d998c-4295-4abb-869a-36888698180c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.120.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efa946d-ca18-413c-af89-93733cc6d702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d2adff-a51f-40d0-a585-952a071a0ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e21ff21-fce4-4883-947c-d364717a0ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.60.80.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5959c0ca-abff-43dd-9eb4-e3d8bca8ddac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41189c39-b356-4f44-90b4-5e62e80c99e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c3d7bb-145b-42e7-a526-089b33ded9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3903192-8f71-435f-a423-50c03a0152d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f915a2-4bd0-43a5-976a-b9b2597ed736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b495c8c-075b-4aba-b0cc-477e4983c2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a753c45-d83c-42c5-bc87-0243267708fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145bc422-b5c7-4992-8710-051c3c68e178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34612b1-5a90-4ae5-bb02-7756262183e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49928083-7479-4fbb-9ff6-c1cd60d89dba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917ebc76-295d-4640-9bc9-ffd93aa42b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe0617e-3b25-4573-a8ba-a48f8f15d4b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e9376c-f770-4b7a-b698-871f07bde1fc", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.42.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01770f22-b36c-4df0-b5a9-a80db70553b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.52.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5ba930-6cc9-4f51-bb65-004e5a1bbf11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbe3b1a-277b-45be-8fa5-641453b880e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8037effd-6998-45e5-8aba-41fa9acee997", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fec0486-aac1-4620-a689-d86b12532bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde100f3-4537-4a6f-9eec-2965daccd11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b477ab3-30b6-4e47-96c2-987a17ec3207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.60.255.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9486db9-f2bb-41a2-adbe-aeb3e7d62a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d34b2402-00f8-48e8-a808-45b33c4ea00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c4ce5f-9585-4985-9b11-206f4622b4eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbde0be-4121-44c3-86ec-10345d534262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef072ef8-9f79-4e3e-afbe-6fe386dd2dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259f7f9c-42aa-42bf-a113-c8347cffdce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edb844d-82d3-4b20-b2c2-bca514ff689b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81621aa6-7d71-4e0a-9bfa-20795d202a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b18e90c-4583-4ff7-a9c8-4581b09ab6f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8338b5-14eb-460e-8285-904f597e9974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce50db4-211a-472d-8b77-d8be36974087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8595296b-5e86-49d2-8714-9f1cf17d6e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d384fa-cd72-4875-b564-6a63b785555a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9494776-faf1-4564-842e-e93363b6db6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8096050-1704-464e-8025-230d0a552117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7264f6f8-569a-464a-aa70-5606f2e1f390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3f2ff3-56cd-43aa-b33c-9b98f777b30b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.234.211.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b159975f-4d6f-410c-8841-03eda5276d62", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.245.181.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b96ec0ac-a882-4ffe-b442-28f1da42f73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f89087-0c20-42fa-adfc-7cfc8f226490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97ce6ae-2b1e-4cd4-9687-f1a9599d6742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ca2891-b93e-462c-ad41-e01aad6c2296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d8a318-03bb-47d4-93e0-c5dde749c930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfe66e29-b0db-4158-b615-13ca1377f228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ea7abd2-1ad3-4e78-801a-f0843c7b5c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc603a19-bc91-4e1c-bcee-30aee4415198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f16cc9c-0d49-42e5-b546-8b9bc1f1d184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2165ab75-ceb1-4ff4-bbc1-7b914c7aef49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae0b891-f151-41dd-af53-f4513cfd854b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac7a931-1a13-4adf-840e-76cfca9ad67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28415c7e-a699-4260-8795-907801d18a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371d06ac-9056-403a-b331-e57a7a2c7eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6bcf58-9b4e-4bf9-8665-49cd398af0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8273b94d-d4bd-4e82-86de-a447b1ce8f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193bb3e7-929f-424f-8726-971646e36725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113aeba9-2e10-420f-9c43-8ca4c11b7489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8852ac94-e8ea-4344-be76-842463e56d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edce9d1f-7565-4918-b023-7ca802b95a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b870b9-fb63-4183-ba18-07237a663d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2179c017-df6f-4647-8836-bc21d3d2014d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0880cdf1-26dc-4ede-98aa-bb3630319508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88ad4b8-e4e6-431b-8064-bb2708b1be03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21dc109-5ee9-4e3b-9542-e07bfdd2c993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f28799d2-e4f8-4b48-966a-1524cdc3c41f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854db009-6784-4662-9f15-f763613747b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea36294-6930-4283-84af-e2f9b7c62710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef4f4608-0836-4f97-aecf-5e2b8c89b12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fb42b8-50a9-4269-851a-23d4ef5de46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed0b4c4-1866-4283-a30c-fae0adaed2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409b7d75-7271-4058-933d-b1c52633613b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805131cb-25d0-43b3-a575-30cecd9b8ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7d6fab-9689-4258-980f-c99f834dea56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999a4130-a018-4f74-b6de-69db987bef64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7abbb4-d1ca-4885-b0aa-74b3de7e5d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7186c58a-390b-4dca-bdec-b784f32b151e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff19c1c5-8178-459f-afa2-b6438781d954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bd16a5-088f-4460-be76-65375bcd3026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01000f2e-7012-45eb-bb01-28cdcf2f7e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82f0810f-8f92-497c-942c-5252d39f0dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eae1095-c2e2-43ed-9be7-35f84129712c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca3ccb2-30b0-4f3a-a7bd-a74ea6035529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f661d8-c197-4954-be72-fea05ed8cbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af4be22-d0f4-4f86-b24d-95a956b1ae8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b81b79-db75-4b41-b0b7-a9846075a7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9e63ca-afa0-4527-95b4-47b89b179107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb747079-b4b0-4448-bc2c-53b0e152bfc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b886b16e-aa9e-4a4c-82c3-e1e085b6029b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f76c17f7-ca3a-4ccf-b680-be6a70bbaec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3567ba0a-a296-4a0b-9b23-4eaf79305d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c77b2a-9ae0-41f5-a9a3-c65a27e3f970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e35e856-84d8-44a6-a694-a93cb37b8522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0dc4185-6c2a-4b6b-99d0-c8c4657ee8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b5dcaf-1f59-492c-ab93-708616388934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49335146-490e-4428-95cc-9fbd3bfa4679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9131282-3a40-4328-8f0e-e79fef464025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644a1dab-bb35-44ba-ba27-063578507143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566a9d85-c40f-433b-b2d7-fab720a838a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa75c7e-8285-4025-9e94-0641820f0d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.48.189.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd7f4fc-9482-4498-8936-63154ecb9a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.59.16.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577c0353-86da-4d48-9e2c-281fb4157a2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf376a96-139e-4c2d-be80-210034cc9733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.12.113.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8032b3d4-e93e-487d-8593-d05e06f48610", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49525ed1-3d34-4382-bba2-ff23af119918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64827ebe-ec44-4de7-a4ea-edf848541cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1460114-4b19-4ef4-8d50-6c13a844ca0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0504b099-c32d-46cf-bf11-ed3974a6e5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3fb60b-9abc-4685-841d-d18a62ad10ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1da780a-a6ee-4138-8a0c-816a15897691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97fffd66-3942-44ea-a74a-5bd4840c5021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4149353-2b34-4cbe-b4f3-7aa702d7dcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def09cb2-31d0-4f67-8e43-d74e1a3a2345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffdf078-52df-420e-ad6a-cd405c57c115", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce878dad-e4b1-4c3f-a63e-2acf7d4d05dc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.15.165.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8544ff24-2a97-4915-a236-37681fcf2723", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.106.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88bc9f2-f2ff-4823-9660-539dfd45395a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8adbb37-680b-47c6-b9e3-b5c8e418bb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.92.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db0ba368-5f65-4fed-8db2-016285b2b729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8911dad1-0ab7-4228-927a-76c74aed00ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.17.184.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea1125e-b9ba-496d-88c8-83b7547634e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.205.37.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--124160fd-ad3f-4493-95f1-a2a54c937d46", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.255.103.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a020e4bc-10b8-4a25-bd3d-9e5eb00b388f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.255.65.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f0ea8c-4def-429d-a418-103401c51de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.59.201.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21f5519-a0ca-431b-ae57-99c5f8661044", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.159.244.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f4e063-21c1-4729-b827-71f5c2ceb62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221fd4e0-5651-45e7-8b12-113568394875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.133.210.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a89e73-cb24-4e5d-ad30-54872e96816d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1026ce-b04c-478b-9c16-3172a77aa7ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3aa77e-0b58-4ec6-8f1b-8cb646cd90ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031a04d9-bb92-428c-95c1-244a820bdfde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469efe62-4e18-460d-96b6-7726b75b3839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.78.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efac0b35-a367-46eb-99c4-cef00d6b8e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.10.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41952b5-f554-4e17-a9ae-5cfa262e3f18", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.52.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10ed6864-1bc2-4dcd-b4e1-9ec9fe6e7518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.73.136.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23293689-1b38-49df-9894-fe2b82ebe6f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.192.178.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515e0bdb-7812-45b5-b809-063e993fa987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.207.35.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490c25e9-a4fa-4529-ab26-0da1912fd22e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.108.100.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a5975d-e2e8-4ca9-a38a-df79c6f262a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-41773, CVE-2021-42013. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.121.239.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f5314297-5d69-4f9b-b4c2-94fa75308476", "relationship_type": "indicates", "source_ref": "indicator--f6a5975d-e2e8-4ca9-a38a-df79c6f262a9", "target_ref": "vulnerability--e8b09de5-07fd-41b5-a7a0-781491653bdb", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0a185ff-13b1-4741-b883-eb4f3a4add50", "relationship_type": "indicates", "source_ref": "indicator--f6a5975d-e2e8-4ca9-a38a-df79c6f262a9", "target_ref": "vulnerability--60b8a746-e0f0-4c7b-90b5-462d6274f3a3", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7bc031-e380-48db-8168-3d40d457caf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd675e36-acfa-4874-aa97-b354ae1c01c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.211.66.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de1a668-0846-4e36-bb94-15380ed3d6f8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.197.186.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11e35b2-2548-40fd-88e6-222917a8610f", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.25.100.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dbfb6e-7248-4217-ba65-9a71bfc2c202", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.27.18.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb76cd88-c185-4124-8ef3-3aa1d9aecd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523af7a4-107c-4616-8837-d78c0ad66da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.70.213.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028d08af-0411-4ccf-88a1-939a25aec475", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.153.72.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd28aaad-7cb8-437f-aa1a-6550c56e0629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.20.114.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f9bec0-9849-4ae2-9cda-c91f4472b9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.20.175.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54736ea7-d21c-4fc3-91e1-b4a2fcc291ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8479ed-7843-4975-8ee0-7867364bbaf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb74047-a8f9-43fe-ac5e-e79c7519fdc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08f7f3d-2eff-42c5-b1a0-5801034136fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.200.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375e059b-744d-43ef-b3d3-753232c73602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.23.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50dd7ba-2ef4-4045-b66f-def6f1a231d3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.191.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c79229-fcbd-45dc-ba07-1b559fa6722f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.20.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35b25bf-2d41-40d1-8fb2-e64669cad6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.67.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b13131a-10c1-4536-8d10-c8e36eae2f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816e673b-6f1f-4c6c-97bc-a1d53252fd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.43.161.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7d42fc-0076-40c4-bdee-7c7970ba4fd1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.77.77.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9790bb-310f-4476-abcd-28bfe7bc3aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.219.146.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ee744b-54af-4e5b-b9f3-874fa113c21a", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.221.13.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd83bc5b-8b26-4a1f-9854-89e47101c08e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.1.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26227904-a981-412b-8e61-1aef411fa210", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.6.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27e55e3-b4f9-4117-84d4-ffa112f1d774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f15904-53fb-4dbb-ad45-c352e1e56b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.137.157.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69339a48-3abc-4d9a-8291-8cd2ad644a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.14.13.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa99de8-0376-4d31-8e71-2a96673677db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1846b2-7731-49e7-987b-f801882a16d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.143.116.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5ab446-0c78-45f2-8e56-3d3d9c64074e", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.25.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036af249-68f6-4094-9e04-143e0cd71af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.149.242.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de4dc88-9b8c-4e8e-a795-09287106413f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.238.51.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf5f592-772b-4e4f-8282-fa47351ad008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e1ac4b-97c9-4672-af27-3f777b035762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.60.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fb315d-297f-4615-8034-be7d7be877c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.129.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb03a738-960c-4fd6-bcd7-c1052fce54ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb8166e-7436-44f4-9a00-191b8e1f45c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.90.36.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdd00fd-2ea0-44a7-92fc-fa874b869f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.93.220.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7247339c-1fe3-4ad1-a19c-ac2bd2cda2d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8875d7d-aa36-4bb3-aed3-e14029d77007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f351e469-ec01-4e7b-86b7-21564550596f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31eab84-fd92-40b9-9911-fcdf0814a937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff03092a-17f6-4025-9157-83908ff7eca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934c9b35-f1f9-4fdc-ae2f-e7e87af6dd9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3cc41c-57e2-45bc-8ecd-98bbc300ffcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e155f82-75c5-4167-858c-e006d180df54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b1e978-6676-445c-a08f-1ec64d3b1841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92baf02f-94d9-4750-b1c5-f402fb88ed2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4ebb60-c9b4-474f-b88c-986dcce2204f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a97576-9ce2-4959-b811-521f6f14662c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18010869-fe92-435a-9654-9b5604028a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03dcb057-dda5-4f10-8f29-221e329d23e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b4b923-3c73-42fc-8798-27fb5a468abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98de4d9a-5c6b-43e8-9183-d932091dec35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce269af-8b10-4f40-af67-79c38a52521a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414fc92a-1bb8-4ca9-bbbd-1cd9ad95bd4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b686cc0-f2da-4801-93e6-ee73c7ea13e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f567afe-b5c5-41de-b8ea-907008b09e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc7f466-635e-47de-841c-b7ebdc158da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fccacff-9099-4b47-ac41-50dc27d83c5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f656271e-eb42-4a0b-af03-2c9849a85993", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.220.74.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70585e1-0167-48c2-93db-6e95859bcc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28dcbcc9-f534-4e1d-a720-754bde9e0fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.144.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4aba5b3-36be-4927-91aa-2c1b19e97422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a46933e-f78d-417c-bba5-d1c6c65498fe", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.65.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457ef912-3b4c-4066-b617-3f70688e1baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.206.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b26104-96e2-49a2-885f-2c0c0590f060", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.106.249.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0a7b99-b971-493e-ad99-f8b0e99403c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.78.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f11d9a-ed60-46f6-a10c-2b1064c44a02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.117.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bdcbee7-329a-4176-81a7-8c56d3056347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.139.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b7b391-d69a-46b3-8fd6-777a210db1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.39.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab84dda-c9f9-4d96-913b-9f9e8bfc66d9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.14.67.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c825e2f-b26b-4f35-82c6-42009ea77552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.173.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8aadab8-ba50-4ca4-8853-45d61ab3e1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.34.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8bbedb-7ce8-4572-8311-34cdbf340876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.65.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2e8001-bfd4-4a2b-a020-fcf644adf10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.67.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2a61c3-8d7c-46ea-9e8d-eab2212d33fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.146.154.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbc5e9d-a722-4a89-bfbb-716e2fcd1b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.63.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e548c1-f856-4eb1-bcb9-486aa771b753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.66.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e8a3a2-92f7-4f51-8e72-1cadabd3d1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.75.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69555d15-7b35-4807-8d7e-b167b08d1fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.100.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d20d36c-a652-466e-826f-ea821844f256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.156.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0491301b-247f-4c11-a587-9fca0bfbd7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.201.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60904b0-f1e8-43af-8610-3a94a1142c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.224.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4368130b-e204-4161-9d9b-5a618c5e1121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f883bd-fcfe-4798-8580-6acff5e9a217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.59.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff425265-78a8-4220-9bf8-12accbf6c3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.223.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c27f7d1-c844-4a4c-91dd-9fd2baa4d5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.124.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b7261b2-bd03-41dc-b16c-874f0d777c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.202.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5a4e05-3360-4472-aa4b-6fdeac212e0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1bb8cd-d09e-4468-b95a-1c0cc1dbc23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.205.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4040427-fe29-45f2-83b3-e1c2a03c043a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.24.69.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2946278a-1e51-4e5c-9741-292b4016ff3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.246.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0448a5-ee6c-44aa-9fee-c898d8148705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.84.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2991c52-447e-41a5-b9d2-102e475081cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.47.127.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf14ab6-a1a1-4ae5-b28a-b044683938c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.148.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f96511-60ae-4207-8471-f2965c6b84e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.175.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6bc699a-3001-4335-9179-305683e8738b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.248.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223fa5f2-0972-4fd8-8f80-95ceb409dfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.250.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de74297c-778f-415e-9842-74530f15fff8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.59.199.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4d5b1f-4655-43ef-a879-1c84b212d837", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.190.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6744432-5b49-4608-b240-e1773419e0e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.214.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068cf640-ec0d-478c-bcce-6501e9479e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.79.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa71ef7-f5f2-4ad8-b304-88e5d6a64ac0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.71.30.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b10fedd3-83f5-4ce3-b91e-70d704e213f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.107.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b89eca8-ff81-4d3a-8a5c-14f6de64cc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.165.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6d04b4-b192-48b0-92ae-03cf3be2e4e6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.2.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e8880d-9165-47f1-ba55-97886d7e1f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.28.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5709a30-f7f0-482b-8c9d-b22959e9a8c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.227.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675e1b49-497d-4c67-9598-f7b798b0c9e9", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.141.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9bdc4a-54ea-4d5b-9e2c-8c15c7fb55d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.157.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b9bd67a-4cd3-429d-a37b-2c704b59207d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.81.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e0800f-a2a0-4a1e-9215-4a29814eda11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.90.77.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf1b39a-8501-4ac2-9c43-aad5220b837d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2797351-3c03-4909-9a82-4a918cec0f67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.192.205.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28511c8a-20d8-45c6-8bc2-d6c9bf66d9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.219.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21077ba-f593-441e-bcad-16df4d4e4154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.84.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--547cba6c-90e2-4635-8578-e2a0fed26531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.96.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac616ef-f144-4308-98a5-d8f85abbac06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.202.40.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf9ee65-e650-4deb-bc3b-9ec270aad858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeeaf0c5-2dca-471f-867b-8e36f34983cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d456253d-03e5-48d4-8024-d7f5affb9711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad458838-3671-4804-a8c0-778081c3fd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b96c8a6-4c53-463d-8290-a96ebd0ec7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb047f9b-ad4f-4a51-b0dd-ea7fb6b0e766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9075d022-c114-477a-bd7c-a8f8b987f5d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72d5b29-dfda-47e9-8198-c3b65637831d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e81c53-c57d-48b3-8b24-a77afd79f5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1d1c29-cefa-41b6-9ddc-133c12fec192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16bd585-c1e5-45a4-b115-aef5b5ffba18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff0f7c0-3311-4a5c-ae7d-ae47582422f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09b5caf-496c-445b-b9a2-cec14ab91d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9320ecf1-d54b-4a23-94c8-e6e55728f6f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413b4aa3-ab08-449d-8c0e-03b5daed961a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47af845-7a5e-412e-aa4f-b2a60a4cfc82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c84ab6-66a8-4e8f-85d8-902f3a430a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a74c546-8e14-4dd4-828a-6100dcbc0465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee40ebf2-3599-4918-aa03-818715905467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41e1219-6e2f-40fa-ac33-ca4e805b6696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e032e782-39de-49ba-8457-0373e61effc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fe0d60-88ba-42df-a0a2-b662a4ed583c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270d482d-741f-4c6f-8a18-489bd9275e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9649b8ba-3ace-41cf-bffc-d6c81b7419ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09801b6-4f48-4b71-b8d3-bb684f0f9a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d520185-2f33-49d1-9192-983e078ab250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a685cef8-20b7-45eb-912c-46cef573c413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6d2b50-168f-4c43-a4a8-a5e0cb4616bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77fb06b9-b866-4c4e-adbe-c026c47ca98f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857db731-096d-48c1-8b19-74fce98bfcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac5ab3c-219b-401d-87cd-42e84e5b5e57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53efa79-04ce-4a8c-89f0-de983635d726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a050ddac-17f4-4ad0-99cb-9a134b6d1d2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e8e5a8-5e2d-46f8-ae2b-a5c4f391f7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97b2c94-db3c-4078-8ff9-3eb7f53b76b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8f6f29-bea9-47fd-adfe-5d4c86e2ea80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14badb18-761c-45d9-95b3-9485c56b9377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea8b139-25e1-46fe-a88b-782ca2e32a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb39c369-e707-487e-982d-4f098d9c2a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84d239a-b359-4dde-8cc4-71db15fb259d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ca82e5-e4e6-4090-b248-d8f13ffd2046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769e6f92-95c4-440e-beef-abf19a748a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caa6ad64-ab91-4699-8d12-52c6c29f8f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba2af18-df78-4b79-a48b-a99a775bfab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4026dd8-d2c3-4a8c-8267-10ae617612f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca793ecb-23ad-432e-883e-ef00666dd3ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f6313f-9a69-4e84-b02f-51132bcb0af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30782c63-e214-445c-93f0-efa7bc98bede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3b3e2a-ab0e-4b87-b21a-a4722c752010", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101fa4b1-fd07-4602-986f-8e92251644ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ded9ed-9f10-40ae-812e-cac934e1a0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3f0968-b027-4bdc-8b22-ecc9c01578d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a80942f-9dae-4ade-80ba-45d9902e7955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89a8f8b7-4769-4b10-a6b4-704449dbf6f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d15e8b0-3b26-4441-8666-69d8c1db3888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5687f12f-a39a-4418-af8a-aaf059a45a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cdab42-5838-4b9c-8d33-1a1ad92dcc9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d0417b-d349-4394-986f-28f240d60772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d304c261-bf72-4045-a70d-ce80508cc035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9337fc4b-a0a4-49eb-aa85-2bcc39d48fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0444fbc6-1908-4410-9e99-088d2626cfb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5882714-72e4-4013-81fa-c531f5d9baa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86c067d-03ec-4b14-9347-bd2e42a7e771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca8331c-868d-4fd9-8b14-64918718d3b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86adcc06-6c4a-4f97-becb-6bf30eb9c213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7b8969-2caf-489f-a47b-2a5e3cae3493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8ea124-35f9-4047-a36f-517ea4843d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809ca871-e84e-4c19-8817-a50a4ad9427d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf4c9f4-4536-4509-a0ed-530885c37d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876e11b0-43d9-45ea-8ac8-47b9b2eafa0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19197511-d37e-4c6d-87f0-85a43e15fd28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c77fdd-4df0-425c-8b9c-c767241ca488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--892e28b8-46cc-412f-a04f-0e625770b6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f76d1e-c9d3-4233-a231-54ea94d107ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f22b9a-f3b6-42ae-b99a-911852728269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65351d7d-54ad-4bd9-b17a-b2b2a1e92f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fba699a-ef41-4a69-aa2e-11913479348c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec00eda-1392-4b61-94c7-21546f14c598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239d0c46-dee5-4c79-a5f6-8b6faccf753f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa028733-b1bb-4b94-a0a1-c06f734312fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b5df93-aced-4ee3-bb49-7926d0b796e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd0e2d31-d4cd-4128-af6d-77253027cec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193b7848-9eae-4557-8e53-ab6ea227fcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177e3d45-0ee7-4291-bd4e-98f701ae962b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a652ed-2c2a-4725-9249-1e74a3b7e5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b203e02b-840d-4344-b134-bbc5edf127e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4d6ed0-6510-409d-b866-4b3106034e7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501e0ba6-7929-4663-9bb1-734d165aee8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb83e07-3cec-48bf-91bb-89cd7433e81b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935cd10c-c9c8-4f97-9f82-672730fe1e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c2d0d0-868c-4d7b-8725-777efc3416b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943fddc3-952c-424c-a6b4-55eace934cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51507f36-7c81-4f85-a93e-9962440fcf41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d434b0ed-5e96-4d34-b0e2-fb465cc64544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942acf04-2764-4d56-8fef-b3aa957aea49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3305bead-915f-4dc0-bc69-274c5924840e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaf245e-9f98-4685-8447-2b857234562b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3ea577-4dbf-4ab3-a7bb-282ebfad7a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4b44ab-24b9-481a-8515-94608bd61204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b583ead0-e139-460e-b2b3-3a2321d5e2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7670ed23-f102-4ece-81ba-886815032cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e458b3db-bd1f-40a0-9328-33e7f88f1b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec544faf-ebde-42cb-b61f-023607193789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b726401-54b1-4c97-ad36-c9d22f167be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222e8a10-35fe-453b-a21a-99ce93cb646f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fe56c3-c251-43a9-92d6-a0fb36d489a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45df864-27bf-42e5-9d89-9f282a5852c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a291fe99-56bf-413b-983d-8a3efb18bdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4f87f8-6569-4b24-9e44-dbbef23833aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba3f827-e4f5-44c4-8603-ab88310c3919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af835ba4-8cb1-4c8b-8d43-ed835dc93837", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750138a9-9e99-4bbc-a79b-a5f12bf90170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d86edf7-e566-4bba-86be-99dc8bf47d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9975d828-85cd-46ef-8e32-a55fb3047f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e96bf1-f5fb-4869-8dc8-1a72352fefb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfc2623-b359-4af9-9ccb-a0811485086d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66de5ad-20ac-4f82-95c1-0aabf64b199e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb1eb4a-3202-4529-9753-8868e9be2e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14cc7dae-fa9b-4b78-ad5d-94972c761a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d03f43-7f84-40cd-844b-1579d1db4635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3ae63a-a746-44cb-b0df-d2e7590762d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2baa657-ad4b-4da8-a6c2-7a0e908d7294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baec246a-6dd7-4511-8165-aff4f72a64c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479fe27a-a09c-4caf-82e3-22ad84a66250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63320503-cfd1-4d9e-b017-136e3c818e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41085ebc-5020-4deb-9be2-0f4ff88843e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776874de-a671-41c4-aed9-0c4a15720539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8c5d1a-5a14-494e-a4fd-5484c6b42fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3cb951-a7d1-4851-888a-cf55ed1559f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb23e3a7-a558-4a30-bb28-315541429d91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c874d4-9a41-4d5e-8782-e3482a621b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe3e0ef-3c9a-44b3-ba59-a74fb30b429c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a453ca9d-4068-4f8f-94d6-6b45a9b5312c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8951a4-da9a-4767-968b-356952ff0282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8786905f-1b44-443f-b8bb-0e4f793273ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7051d5c-a31c-4502-aff0-6e7b01b17d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe663e6-8a5c-4efd-9708-65bc6ed5c584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e03382-c500-49b9-8225-04706b287a0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--376a1ceb-c6a7-4ca2-8f0f-07ee483f36b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9adc14-4c6a-4c8e-bf04-7b4e3179d2a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c01021-c203-4b12-825a-58ddad64d6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639c9855-7e89-4925-b8b6-a37e247affc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac8c353-8e8a-48c3-8b05-98382889bd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e37e8b-74b5-4b38-9250-035d05f15e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f434213c-258d-4de0-9b9b-6143a38ca9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a6e416-57af-441b-80e9-2333f0a3030a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a14274-1a18-414e-aa5b-1eaf0ebf2409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcc6359-d206-4b84-9d33-416da18a0a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf722b9-0dbc-47f2-a65e-df5c29f915d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c6b85f-efed-4cce-a30f-9c9b3d1e9133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a49024e-0b33-4141-8e04-d04ee3921bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116066f5-a6e4-4eb0-b8d5-f6c221b95b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171b1418-9183-4827-b673-bdcb8015805c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed05f14-3e79-411b-9a59-3ae13b3fe14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4da5d4-11e8-4615-8c24-dd0471f93e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681a6078-d2d9-47b0-911c-dee7759fe634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c323497-649e-4670-bc7f-30cf8109cc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff83b352-a225-48fb-b97c-53d57e94547d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0118cccc-f321-4bac-afe5-306478475ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e1e209-dcba-4e0a-91d0-be193ab5f953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56002adb-368c-4f66-b2a3-7848e83894e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafbeab2-3c5f-41ff-a03c-33266ae3ca07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb2a9cf-8330-4115-bffc-593c719b0843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7af83d7-3134-4d0e-bb3f-dd3d0f907c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c62efe-8a77-4baf-b0a9-8ff4b226c153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498c1719-5f2e-4ffc-b07a-a27561ee0535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465b9335-b7b8-4261-b45d-e0dbaf34743f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7710d5-43e9-409f-bd59-586f9b43a015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d23802-5237-4904-a08d-1d2db8a852d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9e8a46-dafc-466b-a1cc-fdceb44b6f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b949b925-c376-4906-8b51-cafa9aa8dd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99dabafe-5be1-480e-a419-9d817ee2a352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be46c5be-de18-4ba0-b228-526c26e6855a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd04234-b31b-49ba-a8c1-ddd5c529e633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd43b35-1dad-46ce-ba98-109fa16e40a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b032ec88-6fa6-46cc-a2ab-72a69ef839b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e20dafc-7877-497c-bc92-7c3e835c45f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93d6305-56ba-4946-8769-b079ded73e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d744e717-64c8-4aa5-a04a-4a283e5e9652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a3c437-9f43-4fc4-8ab0-d126fadf4ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d77d4e4-f654-44ff-bc79-4178f8f37c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ca8c7b-3078-41b8-95a7-34e5fdaf990e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d37bed3-fbb3-4c1e-bb7c-61b556f9b983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9589c4e6-1811-4793-8453-9880df784f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d905148-3b2b-4fb7-a06e-d3a1ba518867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037f0650-6f42-48ea-96b8-639f98a0ba65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b94b553-42d4-4d0c-93b8-bf09c0320394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee677bde-456d-4ebc-8a79-e6c44eeff259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7afafd-9a17-4cea-99a3-bb0f867ed916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888d9020-de01-4099-a482-ca5296fdb92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6c9163-a0b9-4dd8-b305-0f783b7a1a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895f683c-6006-4a11-b6ce-01e5ec45510c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf6fb3ae-4686-4739-b9aa-cbc69ac4f5f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec2a30d-2dd7-41c6-890f-3b1010db1d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71b2502-6e2f-4dc3-a3f9-40aebf3981e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3dfad3-89e8-4827-843d-7df09b003e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b86df2-915d-433b-98df-ea43b939ffd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a9c2fb-a126-4cf2-842b-ce49cfd57d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268c17b5-b89a-4659-85ad-f3103d4f0190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6a7e21-1c67-43d6-984e-6ce9a5eccfb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e51d9b-697e-4672-8ef1-71b80409271a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d8bf2f-48af-40f2-81d0-015e0f517cc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b3d473-1cdc-47ca-804f-43a810c5b46b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1e8b0d4-4652-4439-a7e4-c0d27dc266c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9479bdc8-a4cd-48ff-9db3-48778543f074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968769fa-a77f-431a-8b33-a4e9f6301466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57973a36-f174-4ad2-96c7-1f9c8b95ea78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3436911d-d445-428c-ae23-45f283c5632a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff44f91-5469-4c4e-bc3e-b27d1502165b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d169c45e-79c8-4e4d-82ce-07ad75243488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25113e1-2e88-4ee6-b30b-0127f80fd56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05eee36-b8de-4bed-975c-c59a7c2ce749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79d24db-8838-48a4-9b7a-ede7a3deb7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb16204-7fe7-4d68-93f8-473dcc27868c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe668d62-fa6e-451e-b113-65990854c1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3127ca8-9833-4e11-8282-9dc9f4c96747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9ca15d-8eed-4d45-b255-237d7f136967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f052683c-8c43-4df2-9eae-75ebb381af9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92001529-3aca-4289-8fb0-cc4167dd498f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--641a642f-2178-4568-a884-fddd22ad1e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780d0b7c-d989-43a9-8576-f583b6433626", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af422175-266b-4c99-94e3-8a8f6d411918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d1e1d92-4e9c-49e5-b741-cd817699feb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7474a93-ab97-4f2d-98fe-d8fbf36b8403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333a5c4a-0e43-4820-9d47-4df188c4850b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cad2d1-70b8-4cac-99a7-bfbd03f50917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c880cec3-280d-4f02-85f0-d82077ce6b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219528d4-39b1-4edb-b8a2-d5c0fac6d2bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6212f1-312f-45c2-8730-04d59645e60b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b40276-aa0c-4c54-83e3-09468a0c0586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58578b2-ba75-45f0-9105-a972074932bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313f1027-0674-4f3b-baf7-11341b59e763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e594f6ca-32e9-4711-b730-643347eff5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201a2243-4019-43b1-b46d-76a805047caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e1bf78-3528-4a59-87db-1b0a91f72893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae217c4f-6952-4842-b1cd-4db94f4e1e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6a6353-d9f2-4279-af4a-5acf496e668a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8099a84a-e5b4-47fc-8b0d-2f91062ef60d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1dc84b-22cc-423c-b429-bf5ffb4304a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf7e4e7-a3f8-4c3d-b535-463e5b425945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8bf966-1c21-4530-b63b-386850869b04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0673f983-ed36-486b-9d74-3aad8bdea805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8677af-fab1-4f56-8204-b9370deb9c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44fad2e-43ed-46dd-90cf-0ac957a22f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35f42eae-9934-413c-930b-ac5a178889cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628987fc-5427-4577-8d7c-df21349d969d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834b9fef-fb41-4f97-862e-bb528d436374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796d6a9f-5a88-41a3-acfb-40c2578353bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42353b75-95c1-4032-b0a7-d5cb40731e8d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.163.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0a60d3-9ae3-43d3-adc0-262d3e1247ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.172.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7caf8570-73c8-439c-9054-e8e599a7c716", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.195.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ceae32-45b5-4e29-baba-5e6f1526f291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.216.201.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb70a31d-57b6-45a6-bf88-fea2732a1f45", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.225.116.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a921fa-91e0-49a6-8f4e-fa5fd2648f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.231.18.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceefc9ed-46e3-472d-b0eb-9e5df8205ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.28.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b05940-690f-4fbd-a906-2fc58dcf6dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.239.183.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcced27-357a-453a-8eed-678c860aa04d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.196.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb193a93-46f9-43bc-9e7c-06c87bb09650", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.243.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe0b757-c1e0-462b-8947-05ef3203d104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.109.31.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aded9115-e135-40d7-a42f-05900d70c4cc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.220.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb42d666-0794-4662-b599-ebab60382ffc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.220.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375be313-d2f9-4c71-b750-32ef3880a4a2", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.81.79.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2074823f-9f14-4829-ac5c-db01b1ee1d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.83.239.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554cd04b-6190-4dc7-b962-8d2375014470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.95.168.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0f0441-2dca-4833-a86d-578dc657bbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.97.177.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88060df-496f-479a-a975-d50cc680333d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.112.47.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7631f9d7-4c51-4389-9389-174ab54c57a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.143.61.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fae81d-d227-46c1-aadc-41ece3414619", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.186.112.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0daf52ed-32eb-495d-85ba-f04301f97c6b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.193.56.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99848550-a1f6-44ad-a072-f6757787fc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.49.228.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ba33900-039b-4a39-9643-ddacd17a7ccf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.58.136.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e89703f-72c1-42d3-97f8-fe368b7374df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aba2037-0926-458a-9ad4-7d2a3ebebf57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.12.21.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cdd6be1-f203-47fd-9612-9420ecabcfb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.225.231.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b959d65-091b-4a9d-90c8-15ebc5dac15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.25.30.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb35f70f-7393-49fb-924a-60b91d445d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.61.121.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39689222-59cd-48ee-a254-d2c46420a78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.61.146.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2561f2c-ea0e-4368-bbf6-506c60913cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.75.82.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2174e2a0-1fa6-4297-8244-06a0e8a1ed39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.96.178.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c998fa9-9d27-4e72-8327-9cbbaefbffe1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.105.205.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae305c96-b050-45eb-93c7-75660841a37d", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.165.142.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea939bc-da82-4648-9170-16b349ef6ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.46.170.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c96dc5f4-2eec-4b55-9999-f6688e1aa467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.190.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc01b638-5bb9-455e-a320-2438bab81a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.191.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da826cf4-cc14-4331-867b-44c625c142a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.206.92.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c483373-3399-4f9c-8e9d-fa7a7af162a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.236.161.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c48b7c8-fdb5-403e-ac4c-15b9ce6235a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.231.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8da5d8-0c60-46fd-aebd-5d940181f54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.32.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11dfda32-7762-4808-bb64-c7274e011694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3164886-723d-4621-9c9c-f96e91554c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17aafb1e-c0ec-47d9-810b-1400df2466a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.117.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34dcc26d-292e-4eff-b1a2-90d0a9066dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.119.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c484040-7610-4011-a189-92e0239913a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.120.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a80f9de-75a1-4872-afb8-c5007cc8a154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadb9f9e-770d-4751-bd3a-1c9b9c770c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a815e05-71de-45e3-bc01-68809a4fd295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51427002-7c51-40b5-9dee-7ea00101b9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57de9921-0e15-46ab-8f91-0fe518dfbfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9454c3-1cdb-4150-bddc-a46bc7112069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08533b6-5fec-4029-beae-fd4119688047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b075d8f1-0a97-4177-a676-81155d717869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d892873-a408-4376-a2e5-1f536c34c39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e153dc4-6e7c-4060-b771-418911c29360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b18fd7-5380-4276-b817-605f106360cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6fdc3c-181e-4eea-aff6-a2e92142310d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22400880-c563-4a4b-888f-0cdd11c1c617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee3955d-e8ec-4589-b542-d5f693dd0bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5405ed-4d42-4ad0-aa86-19dcf51f71b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380fd145-4662-4d23-80aa-ea5810a02e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effa397e-d234-4b74-a107-84c88bef8ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5bf089-600b-4b13-9e4c-3b87c10b56bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.160.26.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e992b29-351a-4c1c-8526-7be40c3f6699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4c2970-88c5-4257-8799-47bd9ed444b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.208.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1617624-71cc-4007-9c01-415564d88d5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.0']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d62a3cd-e19e-4df4-8806-c6b0355ad68e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a369fd-81d4-489e-a9fe-4f81c26e4ba8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0996f7d3-d10f-4629-bbcf-654d91937c93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--550c0fd5-b608-4539-933f-56d09705503b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843d1b3a-b55a-4192-ab9e-0c95c6f37157", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9a5124-d43c-4bf0-8a60-c679a1a927dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a614f26-44d2-46a8-8f33-03704d46725d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e8493d-7503-4a2c-bce8-5af2dc6c816b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae0f144-114c-4bb3-ac05-bc6df9461ec0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9711c6-03ce-42e3-b168-0b665cca85dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674979f5-f288-4429-aec5-1c1a2a31d854", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732791d9-4184-4a14-b9c5-58600407ca69", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5fe676d-506e-4148-9424-f547af41337f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc7d453-888f-4132-a669-cfd6080e392a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df80761d-5874-49c3-a4db-250b1d49ed42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7964058e-6b81-41b9-9080-d06597fe0e78", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6970e2e4-7618-4daa-ba97-2e4e6c83333e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fabf70-f7e3-4e0e-be61-016e33f1fa40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013be4f4-75ff-4a96-a700-4e847cbd0769", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e1e9ee-18b5-4d06-9984-4da8da79b72f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4567376e-08dd-46b6-8ee9-0f8bdc51a636", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9346f0a-8bf6-4c22-8e47-65df16d094da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c048e982-1869-406e-a7ae-e9a4529e07bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94fdc5a5-c38d-4c1a-9053-5fbbe1308e9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d26f2076-7d3c-4dc3-9876-1189cf8a0d93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5645fd30-c6e3-4348-88ed-745d6d9d7d0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417382f2-ec89-4466-ae57-84041a0d42a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b782d8a-64ec-407f-b2ea-12ffacdd140e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616e6e52-bd81-4fab-8f06-859a0009b82c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc447cd6-a72b-4e2b-8b13-1dd8c1301d34", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--000a1553-120d-4695-8005-cb2f754bbe76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42a3ff7-5606-43d5-a94a-f9e60888facd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36f377b7-7d21-40df-8857-ec43d8de9e99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e6c6be-6460-4913-90d4-59310c7a9f0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d00708f-a46a-4b61-a32e-7e78facbd9e2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fd5607-bc70-422c-858d-8efaf388d690", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69056bbe-da12-49d3-b741-e92921d9c9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.203.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba268f6-f419-4956-b2e8-54b128f1bf45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.235.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af060755-fbcf-433b-ae8a-0b8d73c23ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.10.158.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b51c039-be7f-4204-9941-1e3669192dd8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.178.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e45ec7-6aa0-4930-ab36-915c0a8cac65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.162.56.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea762616-1443-4181-ae7f-67d2591c80a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.57.128.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb84bf61-cf11-44f6-81d3-512df90a558b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.93.28.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235eca6d-2dd5-4931-a049-a48da0b78364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.1.65.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854c7cd9-eff7-4aa0-89db-026cb039009a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.224.116.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8f6be4-f6ed-4ecc-bf2d-f277de0d2f69", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.4.62.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51c4682-d7db-479f-aad8-d088dfe9a8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.57.132.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b2d410-e569-461d-a914-cf70c210d472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.82.180.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f55c0a-53ba-4f28-b286-b5f80fa9267c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.82.237.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333bf35a-39f6-449d-8586-8ebb141ca24e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.83.147.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a29cda6-7be7-4db4-89ec-bba4e2319ee0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.20.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20d9366-fb2c-4afc-a269-c793c3eddb69", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.60.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d10ef71-bb28-4fd9-ac42-3d559b26911d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.39.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14489ecf-73f5-462a-a8ce-8ef64e43f464", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.14.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d8c21e-4600-4e8c-8d83-71e22fbe7469", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.91.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0866e71e-8d3f-4d32-8013-82bd3dc32d2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.1.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbd622e-b167-4564-b863-71d0cc33bafd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.111.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ff8a5d-9497-4f06-a5d9-2df29ab2fd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.23.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92880231-b46e-4bb5-b858-a0d1fae76af6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.98.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ffcf2a-0821-4337-adc6-94770bb41a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.115.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f491b307-2d5a-4824-941c-205cff38178a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.133.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73765a3-97bb-43b7-b194-86f4453303bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.54.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a307d24-11a7-4b70-9291-ef305a5308af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.202.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffa72ef-02fd-43be-9994-9e7fb7ec5d73", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.67.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed540ec-fd8e-42e2-8e6b-87b51fe74185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.147.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be220927-fd52-4eda-9a48-7eadb367a831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6c97ab-a01b-4a50-9f23-a61ce765635a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.179.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10d1a68-7030-4935-8e2a-dce83c65d88b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.180.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a55f1ea-b4ac-49f8-bf09-9de8f7efbcc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.191.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cd0230-7114-427a-b7a0-2a19be1a450c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.212.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b2a72b-f2a5-4e02-b153-69ce4dfc8654", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.161.224.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3214679a-e8be-4da9-b633-3f486fcda6cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.247.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bbc52c-5c42-4add-a5bb-061959f77a2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ca43f6-f785-46a6-9724-868f424b4f72", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3575beb9-55c9-46ae-8cea-2c1258e4771d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39e2cbb-79c1-459c-97b5-a5f5730aa6e6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35352d64-a64b-4ae4-98b4-ccad45e8ff3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0171b644-670f-4042-ad5b-0817958b56a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea285f1-2d12-495d-a8e0-edb35f2a05e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.178.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2168ee5d-ee25-44fe-8be3-bcc1b9c0fe0d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e67ab9-4c44-4895-8193-a8acb237809a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b33bfb7d-1497-4c53-810c-e45ddd2315cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62dec8e0-35bf-4f9d-bdb7-d3626578fed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4eb735e-54e4-4498-b9db-38170284d12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b06fc1-49ae-4623-a5eb-2380670d3d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f31f0ab-8dc0-4935-9eaa-34e563e4565c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.197.205.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0aa8e27-02a8-419b-a600-1fc91e36471d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.200.146.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d40a52-a8df-489b-82b8-25b8cef56699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.202.125.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9565380a-0df9-48cd-9872-88b5e45e136a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2a64ee-88fd-4fd5-9e99-fb545cda9874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.227.45.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2331b3-2cc2-46c5-b07a-496236de8ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afdaf46-74c7-46e4-b871-82d1fa9bcc6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125aef38-12d8-47bb-85d3-bf282284db4d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.130.127.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6508ab6-697d-4eb6-b231-3f35b3e7f98f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.193.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac7f90a-d0ec-4f01-863b-c4071da13ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ecb0cb-a61e-406c-a94b-8e770e8fd55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cf113f-6f98-431e-941b-c0302708db1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee42a93-3120-4e03-a4ee-8c41b6edb6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a43e40-170c-45ae-9da3-904402975e57", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.137.172.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7209b5ae-b94f-463e-962e-ed8913cd9603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--828a67c3-aadf-4413-9be8-902525bc82c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670ccfa5-cdf3-4fad-af43-5d150f31c3d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f587bc-6367-4498-b054-dad43fbbf2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60e6a35f-cf7a-450e-8758-7396ad8d813b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8b0c89-304d-41fa-9b0a-434eca648456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e80da5-fc86-4f3c-8566-eef4b1f2e1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e70c2f-1aa6-4ea5-a5fc-17185a5820e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960480f2-f530-4e70-a6ca-240f0e10f4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc262ae-fe7b-4b46-b20a-eeaa7a32caae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88d5c743-d670-4f90-a27d-97a6d5c0a678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d180d0-8317-4574-bb4e-68d21fd33801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0270ee-6caf-4dd8-9275-d193bb2f66f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e453e63-c802-4cac-9a19-6e70d29c8ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d10d81-da4b-4492-851e-23b6ea01bb75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4555ce1-ed6a-4224-9c24-b5af5ce4add8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a851e890-3dea-4224-95e4-21e2a6a94680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876b33bb-1491-43d8-8dbd-52073e52c414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2e0d6c-f737-4452-8a59-f22038e1fad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7118163-7e4d-43ab-b1a1-b37619f3856d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.3.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532e3881-b171-4680-a96e-1e69b2467689", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f8f2b6-9c67-400e-adaa-8b007f58351c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70123245-5d19-4574-987f-adf577559a00", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66728c4e-470a-4b8c-af5b-1e6531d00bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6f6202-7d8c-49af-a499-e66ebe383ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42fc154-e9a9-46fa-aabe-410f91668035", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d68ff7c-4591-427b-ba43-c5ed5bee58be", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf07ce51-805d-4951-afd8-03d874d4f7f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ac667d-5da7-4ccf-90db-7f6d81a5c84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5b2a23-1135-40c6-90b2-0ac12bdf1319", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659c08ed-1107-4a3c-8a77-628f0f21edc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8db0f3-439b-4a64-ac8b-ad43cda478b0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e05769f-7372-4378-b8ce-e1a089324d44", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662fd85c-e023-4b66-9d50-ef823cd22e2f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c0684c-9833-47ee-be3f-97c16ba49503", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c9e52f-5a84-4430-8d7a-c1b6acceb8a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d05660-6181-4d7d-9164-33a5aa7d7062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ee285b-d421-4b2e-9f99-7d65c5ad33ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.147.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e06d9d-7ce1-4dad-811a-995f6b74ff1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.149.243.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2daec1-0648-41fc-ae05-ade0c4049ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f066afb2-7b8b-449e-9f94-e8c7b225dd9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c075033c-e48b-4aa1-a856-4ad6630e1667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0341d19f-f104-43ad-9998-be6b493ce42c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7659bcd8-4df1-4019-b1d9-c8868e0aa0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21db5d8c-318d-4672-ab0a-33d8df591b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d31de10-bee1-41d1-bc22-6ab05ceb6671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65009f33-d2ac-409a-bb92-387bc2f642da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df91e6e-3736-45b2-aeea-1cfd4fc02f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53fc2a58-de2d-40cc-830e-266b495a91db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5858329a-3b25-45b7-b0af-db3a881c1c41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3011accf-308b-46bf-a3a6-6f162db12b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2a2065-9cdb-4549-9d8e-6183dc4e21a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b9fdbc-6429-405c-b5b8-5418c6963163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c515058e-6db8-4cca-9373-34d4567cdb4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e7c79d-67be-4396-87ae-eac56b242377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d382c2-bb4b-4a06-b01c-203fac162ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51dd7d8c-3dda-48e4-a746-b6ba4fe58b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7cddce-4d98-4840-8491-13cd3ccabc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7145b74c-ba11-4a7e-8bdf-b462cd6ec971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c220e5d0-4435-4419-8528-f94761e0b16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107ce088-5df9-41b2-a4c8-5ba7c35ddcc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2303b60d-2789-4a2e-9141-08fd902b6ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfb81797-67d7-413f-bad2-50b63ea42f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36699c4-4fe2-4907-a8e5-b4a5dcf3882d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.163.86.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d91464-9a58-4661-bddb-05781f025d76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.168.174.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545c2e59-9be4-4673-b976-266d0953dca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.20.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8184fc63-1b1e-4710-9f3d-696306fcc30a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.171.253.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4340fb5-ed9c-47e7-ae70-7316a815604a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e447d71-caef-4978-9a8e-d165db651e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.179.201.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d589697f-bac7-4c4e-a2a4-0e66af8a1b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.192.184.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110a4691-a2de-4790-bd88-549180451517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b7102b-4227-4041-aa2a-96aa2dd148e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a1cde9-5744-4cae-b296-20de1742f1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6fe9d4-cad4-4d88-88ff-194399edb968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d131e22-e357-43d2-bbab-fde9025a2b34", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f35d59-a4af-409b-9be2-5f0aa92cd05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ac004c9-e650-4217-81ec-4470d7e819b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3077bc63-7949-44b9-b33a-a93e85a7dac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77e6b68-eafb-49fc-acfc-f3d5f5280d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab82bd0e-5604-4719-b91c-397124bfe3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df6f2b3a-148e-4d07-8aa8-7503bd372ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09037948-15f9-40b1-861f-340791ca53ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716690a1-32a7-43f7-83ea-59936185043f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b000da-eb1e-43bb-9c90-9e68362c7d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df5fc7ba-904d-47da-8730-f87b8eb51b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ebe7ed-dd4a-48a2-a0cd-701772c74205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51027ea1-1364-44fa-a834-dc692b6ba1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13392857-ccdd-4e57-a09b-a4b0f58107e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b61cbf-2934-4017-9375-d0dc714fa8ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.226.104.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399dd644-b743-4f95-88fe-53f0121f277d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37e1273-1c76-48f2-b868-891225a87c29", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3274aa32-3790-4c58-bc16-1f60f4b0e57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.66.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108941f3-1720-4edd-bce5-b4f1556fd9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.233.218.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce063ff-3ada-4f67-8345-5e8482468327", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.238.142.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccfc115-029e-46e5-98b8-f621e69577dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1885a7b0-64bf-4c50-ad4c-d5007fa5255b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d601fc8-035c-4e73-a75c-650ab087740f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09383f24-b9d2-47c0-8de6-89813ccb7c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81056962-19f6-48ad-b238-3683e8bc1645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ece3b9-9431-405f-8935-a0e27561f0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a86152-c83a-4c6f-9f3d-f993f96c34f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b2663d-470a-4994-917e-64193d6c98fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e2d492c-6505-49a8-b35a-164b6aab2186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392a258c-1d29-4a78-8207-ecd32b0a4375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc4b2bf-2cd9-4dbd-bc95-787ba3a7278a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5d3f78-472f-465b-9ce8-de3c23979d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a699d25-8c3d-48a2-b06b-d9a7724bd484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538795a1-faaf-4d47-8d5e-63bcebbf669c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.65.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3071efe1-5445-42a2-ae17-a02494e5ba3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9658417a-f7db-413e-961a-0f80db1edb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56567e29-ca88-478a-b19e-04b04f5f1590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b800b1-131f-4ed2-9f03-d90e097607cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d861572-6b4c-4386-9b70-70b4247e06c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a031638d-c87a-48d8-9d52-2dbf92ec0ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--120bd8c3-b0ef-416d-b2be-fd51c3a1361c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d6460d6-6292-4f7a-a51d-7a2fd45566ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a845dd88-c6fa-44ef-a9eb-972b4e18810f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.41.105.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f95020-68fc-453f-96f5-ac82766e3ef1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.41.206.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c629f2b-9316-486d-988b-b3eab120c21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00215e47-f593-4529-9d21-0803b3b20676", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.37.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b10843-6497-47ab-9bc2-633851ea6214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.45.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fe65bb-87dc-4e8c-a75e-0610441312c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b08249-2e21-41fb-9685-e48a7df9f07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de614e55-c521-4900-9d3b-8c990c07f97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982a4cfc-2d18-4018-beed-f35fe16063e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06baf0e-0d6a-4a6f-9422-a9cfa5ed4d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ceec93-071d-4b1b-aa5c-d4b8440287fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.50.15.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c32fdaa-4c76-4a1f-8db9-fdd8be9cb2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1dc41d3-9882-4047-ba5f-3ad7e71ccc01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72df7ac-df0d-499d-99f9-941c8953801b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996d610c-13c8-4038-ab68-8fbd4c662206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fe4c80-5e58-49d3-80ed-26b219067445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efc4c7b-c1f3-4aa8-86f8-05c780a0dc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01ac8be0-028f-4751-8269-b99eaaa4c84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.6.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d71833-0b87-4bec-bf24-bfc68129fc5d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.77.174.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ff130a-ecfc-4445-8ce2-2c027f1f5c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0656da4-c91a-4e44-b6ba-4ee842eacff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560ca814-876e-450c-bad1-f6d131877dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf20910-de5d-4945-8f84-3fc58cf88169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99dbb7e-8ddc-448e-b8d5-79eee9940cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0030cc6c-4bf0-4e63-8dc1-12045c4dca52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e418bb-c073-457a-835f-0f8f71a921e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.128.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66048635-e33b-4055-a27c-240b0c1e86da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba2a808-877b-40f4-bbaa-82845c84da5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--133739e2-893c-4e78-b287-11448a255aa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f587f9-87fd-4224-b49b-e73d935daf8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c34094-bc07-454b-b5fd-ea7d7c329d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94011f2-c95b-4ddb-82f7-b9eb0b2c1a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f0771e-80a7-40a5-be09-2a838d10a913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a20885c-1bdb-48a0-8bb1-84b4de9da34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474aa2c6-a8d1-4ed2-841a-f247142cd5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b395f927-36f7-4670-8a58-2a9e2f8251da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321a74be-ed86-4198-a164-37968eac6a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65737dbc-9dcb-408f-a7d4-2890d0c8ff4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc65dee0-7c80-42c6-a93b-7a4b671bdaf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.213.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0b9d79-fdd5-4c8f-9eaa-762e3ec892dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2f40d4-6b49-43e2-9adf-f735a3372e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e206f2f7-ba01-47b7-bb8c-e66ff40de234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1147f2-0bee-4a99-92db-ead7a3323488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4e0782-c1b1-4c11-a080-071e18af0280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d83e8354-c2c8-4e84-a685-c8f1c31069fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b913ab6-4c7a-4698-9ca6-d0602261026a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8aa3019-d29b-47ff-bf47-95ed94e24c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce90b6b6-31b6-4285-b914-fc88372cadd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b47d5eda-c693-4eeb-bee7-c803c611365d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1139fc3-8ea3-42f5-8a87-d50c429ef1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8c2d7f2-2d02-44f4-ad42-04a696958e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ad2339-b33a-4568-b273-31fa41ca4fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cc427ed-7253-4627-b59e-75c9d279a61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c1a645-771a-451a-b8f5-443dd7beff95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eeb2538-8b23-49c5-8b73-d44a92403ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2465ec50-4319-4006-b509-7e54539871e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a01bac-8ffc-4c22-9d41-86c09859aff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d856de-6c1b-4be0-8f50-3be6598b2b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaeb0c77-bf51-4317-a250-d114952d2d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96017d3c-c627-45fb-9f6a-6d03cea4208c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7134f7-17b3-4e08-a4ee-b1c5a8afa955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc4c4ee-f88f-4fab-a2ad-1355b3f77a74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5f47b3-37c2-4e68-a26c-fef4416986e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3a1853-c10e-455e-be12-cc24482a61d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2128e97b-5755-4d26-b9ee-53d00ab6bebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9751608-4921-45eb-bc60-e7e48808627f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac80f57-3684-46f4-b6d5-5301f9d0820b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c54a79c-8f49-4092-831f-a2dded1af01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82731ed5-8378-4c0d-af9b-15d19504b625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be91488-86a8-4517-a1da-a09602e5e7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21b3b10-78f3-430e-8cfc-0c866591dc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8727a3b5-684d-421f-a6c5-63ef782931fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6f6e29-3789-4bef-9b5f-338dc1ad4b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d962e1-e79e-4626-aa7a-ef05fc537460", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.138.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67162df7-84ee-43e7-a2fe-6b2e4f84ab07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a65c14-3067-4ea4-b9ff-739bf42b2c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856a196a-9600-4adb-8ec3-fe4887824bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.82.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f7f6ea5-11ac-4fdd-90f5-2b4a8953d7d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.102.249.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4ceb86-33bf-45eb-9bc3-da3d0f63bd23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b837b62-0e8e-4f71-a509-1fd14b91d1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8f3bbb-2d2e-4992-8c16-9766fc55cf5e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.105.80.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44af911d-1060-4909-956f-85fdb2d5c4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.109.80.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f64198-1162-463b-aa30-1d8824cf4fe1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.112.20.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698a7e14-e8af-4188-ba44-1431a539206a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.114.101.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b09ec89-c139-4882-bca1-e3015eb40c91", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e00dfe-7f3d-4bac-823a-9709d1064877", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe72911-8063-4ade-8dad-f39c190c9736", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2409b9-8068-471b-af79-84751e6ab745", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1966d2-ca9a-46f9-ad7a-284a1d0552aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.178.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc820b0-2ccc-4f14-b614-da9c4627a9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.192.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7370010-7400-42bf-9105-139ec7d6bf60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.2.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1ff47b-1566-48cf-8236-470f98229c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.37.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe4f13f-aeb8-477f-826d-7fa68aebb623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.193.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce72ffc-9a3b-4340-94ea-aaf83f1a20b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.193.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ead738-0507-46ab-b503-b16c810300da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.199.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec973ca-dfce-4c90-b441-84debe9a48a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.210.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb65df9-99e2-4786-b7a4-a51a2f899f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.223.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4f2d66-1180-4207-a0e4-2d5c23bebd73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.71.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f5ec0f-012f-4b68-95dd-73b447f4d337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.121.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef39da99-0f70-4a35-8650-ce70916e24d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.206.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192e0e60-eb05-4698-9827-af30904e7d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07aac82-0222-4ff7-bdaa-d78ec79fde5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.129.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0628e0f-80db-4cba-9b71-3466eb6293af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.133.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f54a7d-4a85-4f39-a52c-3067eee3b564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b666eb-b4e4-45aa-930f-90c53c8df5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756fc2b3-78e5-4ead-a5e3-2a9b85c40016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be76c7f-2d4e-49b1-bdc5-a5262ffa74bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c740c0bc-d99f-4a13-9813-02f55762e5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81726ea0-954e-4455-8e33-5208903a4a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57486e6e-12de-4059-83db-0434ed6fb2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d581ae-8815-4dcc-a4f8-96f7dc882eaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869f79d2-26c1-4d9d-8c13-986a5ecbdc1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ace182f-332f-49ec-a5d5-95dbd72bd6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d457df8c-677a-4f8c-8bec-72f0e7f01b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e21a72-002a-4afa-851e-4eb7926733fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.26.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee499bb-383c-44c6-9912-f0b3fae71676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.54.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f69e84-b41d-4e96-ac21-53327c0c01e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.83.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7eb3760-dca0-4652-bcdb-01f64da78851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.112.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059d1185-028a-4585-9610-7ad90904235a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.113.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c613bf8-225b-4c5b-978b-4e8ebcf329a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.117.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c0a2ed-4743-4680-b27e-6dc534f6867b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4605794-3831-4dca-9ca4-b10978d82037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7586a3ad-07cd-46da-a292-e309e675264d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.131.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017bd507-4439-45b6-b506-d71ed87ee1db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.134.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bdbd07-039f-4273-b966-c7c2192125d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04387a28-8d79-42ce-97ac-33c2bae52093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.138.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ac5d48-930f-43df-bc92-2f48513b84a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.139.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece894d7-0a26-4e2b-b82a-60647222edcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.142.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf30bdb5-3417-46af-80f1-8aad55bf38f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be903e31-5152-429e-8b58-4b7a08ac885f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.152.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b980a846-fea0-4d5e-8a4c-d1b45d89ff85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df076f1-bcee-4a6c-8758-3344d8ce3a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7f3739-4d26-403e-969d-25a83281ac27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.171.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c1e3ca-a267-42b3-95a8-8320b8c39e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.174.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10820ab6-6f9a-4a90-bb74-de95af6a66c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.176.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f354aa59-d3c7-4b87-a98e-9769bc0fad64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267ca86e-8ab3-4f89-ac06-abf03aa713ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.184.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece959e6-67c1-490a-962e-a48f4b31b8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.187.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2769134a-9954-49c5-bca2-4339a49be99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.188.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70b3d03-6cc9-47a6-af47-031c69e9a31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.51.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cf5875-f7dc-4795-9a33-e1d72c7fc53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677f79f7-e69c-45b5-8c37-7c77d5c524af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.57.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e7b8385-b493-4a43-9190-825f67d559ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799bcc25-8c58-4c69-8dcc-a1b9982a07c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.87.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c75d961-1985-4209-a0bc-e5f9f0556e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645a5c51-1eed-4f85-a355-47b36bdb188b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.90.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616e8842-6826-4964-a382-a4853ea53560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c934e5-1e98-476d-95bf-755093de80df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.93.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4ed07d-395e-42f5-85ca-9072a07bc894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fea3360-a02d-4d59-8235-6208946c456b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.110.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5133e6c-4ee5-4db7-90b1-4646d477fb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246d4329-4c46-4a1c-be78-39570e483d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.121.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c64f76d-63a7-42ce-b383-7b1f3dc2da4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622479ea-d550-401b-942d-2b29b732128e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1c500b-15fd-485d-bf0f-c9418348f216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.127.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec298df-bed6-4a69-8f4d-d794138533c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.162.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea634bf7-e659-498e-a86d-9c6e8975cdaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.165.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e8bc56d-1e62-4a83-bbf8-3b5410ba1d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.176.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed72fe9-76bd-41cf-8e36-cf991f43f3af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e07e2f6-59de-47e3-913f-59a74f3c9a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b008f060-00b6-4f53-8566-264cae6b8ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.185.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900ea705-7416-4459-ad36-821eb35fc854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.22.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3baee386-28ef-4363-a8f8-5af1ff5c008e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725ecefd-a7a8-4eab-9de4-6912c4662d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91f80f2-712f-466a-beb4-84658eb68d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.249.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f689c50-a5cd-47e4-bc02-b98a1dae6578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dec0aeb-6fe5-49d5-9301-306d123cc418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783fd481-92c9-4b3f-a856-40a864bc2ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f78e43f-fcb8-4e22-9e04-fade3b0f12b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.254.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c6c234-6be2-43e7-a5e7-1e76ee46950b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.31.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df68e0c-4da4-474c-88f4-17bec5895bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.35.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8932829c-e533-4a00-b52c-49ae6035fbdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.40.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057040ba-a550-43c6-abbe-552a35b52568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884a8be5-3170-4b29-95c4-923e4c298fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.44.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ba5464-5769-4548-891e-4f4afbd1070d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.48.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfa51d1-a815-4664-9173-0a061eb86880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecffc7df-b4e8-412a-b951-c88afb8c89a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd0e621-c82b-49da-a2e9-331c9823c2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c90ab03-f0c2-4601-8c87-11da8fd0aab0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.70.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ff8739-a37f-4066-8620-cb3cf225509b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6c41bb-4521-404a-9ddf-a02cddba6c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.90.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5639d896-84c6-4b68-be14-ddede0b85563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.91.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4001eafb-c3b0-4042-ab6a-75070a69935d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eabae64-72fa-4d3a-857a-823cefef3f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5825035-cd90-47c9-a5cf-e63b72eca9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.129.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392c3f9e-8a39-4f5a-b7b6-d65e125a5c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.162.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7e103f-b87d-4666-99a0-1c5d4f963412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ba7e3c-0a63-4f1a-94ba-37304e902eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbbbcb23-6b21-4571-afd8-cf00eded4e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.135.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dab93cb-ea5d-48b5-b7da-dd529e0b7e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee62f632-35c9-414b-88ed-8a2a15eb82f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363a08e1-ae5c-493e-bfe1-36c4e9d34d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.146.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c449884d-5234-41e9-a529-c816c84a8797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fcdd77-fe8f-4bd2-a230-cafa38e48ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587251e2-291c-486e-94b6-69fd52dfba1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.173.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c923440-67d8-416f-9d52-b09028503917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79db312a-7177-4592-82e7-d137c1041a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.201.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93295aef-400f-4775-8381-fdf09da86465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.233.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a00e22-977d-4d3c-a768-2db3b855b734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.241.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74008eaa-0497-45e4-a645-17092c9cd712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.245.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d423b034-936f-4e55-99fc-36f4bea44afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.248.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97e0408-8858-49bc-bb43-47ae9d6b135c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.248.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7717880a-5699-41cd-bb58-b79c736c94b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.254.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8977af5a-3fc6-4ff0-9233-b75a09c4dcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702a1e9a-08fb-498e-b96a-f3980d1c41a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.69.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e42ff28-a61b-43d8-b4a1-58ff3ee1486d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.90.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca24d273-05c9-40ac-ab26-9a518c373a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.41.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42206f2-86c1-436b-8105-5df02efd06f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.51.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906d59ce-37be-4d3d-ba0e-72e808ac1215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.179.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98876a46-9408-4c11-aea1-a312b568eed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.213.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17092bd9-44ff-4935-ae28-b98183375b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.214.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8bd845-386b-426b-9438-5bec5285c3d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0589b2c9-8367-477c-b27d-06ed73230160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.218.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33a64b3-c718-4fe6-a645-52a5e0efd764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.219.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ddcd1da-abb6-4899-ade1-147f9c4321a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b47d1c-b7e8-463e-8efa-6debeefa8bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.221.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9549c08-a62e-4c9b-a411-37d272376a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.227.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cf9226-bb99-4d3e-91a3-72e29d99f7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.228.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203ebb76-fea9-47d5-92f8-24e9a0302a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d87f56-33e9-41c0-b014-c73aa38e24ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.238.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b72c15-149c-467d-950e-9c8fad67507e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.83.200.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b94eca-fc0e-4cd7-bfb1-69436a3301d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea45b51-0482-4084-b003-fa55a3105605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.101.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ab7bd8-6e54-4c29-a6eb-bb50b1164376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665f8c0e-3ca1-4088-b201-1ce585587ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721dd036-a04f-47b7-be1c-4a6d755c4534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d730fea3-eb59-4521-bde1-7cd05bb6fcf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b982fd56-ff32-4fdb-89b3-dce2bff4c1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dad73de-bb3e-4312-8a96-4c7392729189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96665b19-d56f-48b6-b765-1303aa87f222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc40d4cf-3920-421a-93db-09ed4279ed95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c4fab68-0e04-4b43-ae7e-66180cc1f460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.111.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b369cf93-a5c4-43fe-adfc-e855add774e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b23a7db-56f9-48fe-97ef-c715f85779ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.128.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cb4254-5ea7-4c30-a63b-57a9d8872702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.129.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1773cdb9-0113-43bd-87bf-c76dda00d0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba644f58-0dcc-49a8-a191-4c7b72464a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef504167-ef7d-4883-97e6-3be2ccd608fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.132.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7150bd06-1457-4c77-8c6b-68a61043e65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f5735c-c960-4da8-9071-b9be3110047b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.133.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c38d3a0-21ce-4da9-a73a-366bd79776db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd44069-c14c-41af-9f9e-b724566c22e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686340b2-9b4d-4583-ad95-ce61d302225a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.138.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25ea5fb-c6e4-4e14-a39e-ac43a927ae4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dd523f-09eb-4e65-88cc-84cfd73d3792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6872f87e-e993-43c7-a4e6-1d9b6c6c11b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf85461-1f6f-463f-b572-6c14ac9fa4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a39e0f5-2795-4783-9538-3e205b1ff932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168d099e-1c18-410a-a299-a0257b19ecdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--615dda85-fb05-40a2-81c9-fe022212d8c8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.187.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6918d3a0-4a74-45c9-a6a6-80099d5c49fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf06b66-d52e-459f-8816-166e6d7db850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.191.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a19e54-08c4-46be-badc-34a7d2f40e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.193.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f355db-895d-4c8e-94a9-9f8acece3cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.197.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ea4e3d-08ae-4e86-8822-413835f3037c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd94845b-2b71-474c-85f5-2a1fea49bdfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.205.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7e307a-093c-4b79-993d-9ceb7bd7b281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89a09aa-0701-478f-8dfc-e2fc94997290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.46.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6185952-147a-495c-8d23-fdd9a44b4c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.214.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e1d605-b326-48dd-852e-c7ca000dc42d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.18.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a499b15-8424-495c-b6aa-c7c5335cbc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.55.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db5f8081-09a7-4a35-8e37-a740d0126789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.89.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7778cce-f459-41c9-81ce-741803dbda7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.90.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd445f7-3036-4305-a11c-35d0a9319957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebafe09e-fa18-4e0e-9b8b-9a65d70b7cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.230.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--336f5a15-5841-4caa-86b9-e00a9926cbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.65.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7e86c1-4c75-4928-88af-0728dbe5b204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74bcb7ed-d973-4254-99a0-d730ef69cf86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ddc3b7-18d8-4859-888e-97dc60cc0341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.118.28.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9caa765-9a42-4b39-b613-78d3ebba9b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.205.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7165fc1f-c848-4f4e-8b60-c1e1dca6db0c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.39.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61bef24-d8e5-4f77-9df8-291c8a3fbb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.7.214.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc319de-830b-4b33-89eb-a3c202a1de31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.1.1.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b4861a3-9331-4158-a82c-462eaaec4f5e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.12.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddaecb5-36e8-4b42-be43-e2613eb66e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.86.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a11ea025-5a9c-4882-a5a2-ab15f0535c95", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.83.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57d5a66-a616-4f17-ae75-368152dc39c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.183.101.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4135d768-e177-45a0-804a-53744a8ed1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0240e1ec-3a31-4ac4-8b81-ec203e300e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebbd6016-1a2e-442e-92a3-ed45c561cd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709c97fd-1229-4ab5-85ed-5d974b350271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf8e61a-416e-4cfc-a680-c162133669b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a2310b-9ea3-472c-b802-a6de8ab7de9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.223.67.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d51a00f-e5dc-43de-9eba-63cf648a577e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3eaa797-aa29-40b8-b8a6-9c59c1fe6bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917c22e6-0a42-4325-97ca-7a587ae314e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f485bc5-98f0-41e6-9198-698ad8e8fab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f37ad4f2-947e-4e0c-9bd1-0fdcd47af3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6557259c-3dcd-4f98-a694-7059de66f6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31093637-ac52-4a43-b238-2c58c528c315", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7e1001-bf42-4591-9782-f144cbcb5bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ce8994-0a1e-446a-8d72-40de7049861c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9868b68c-11ea-4733-a42d-43c031490b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2096c2b9-4cac-4096-929d-44fc9280e3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187c4800-9d3b-47fe-a1f2-4f200eca357c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1c7ba1-efdf-41c3-aeb8-0de6cfd5722c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf583ec-8748-447a-942c-9ca6081b3161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaf69b7-1afb-45a0-855e-59a1f8ed917e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9532a3-99da-4ad7-8f13-28ff6441b63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dda06b0-1dc2-44da-933a-2a67d28bbf2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919b07f7-576f-4ec0-b088-d3cd27adb0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf92e373-dadf-40b5-9a28-609a1bd16b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31949891-a65a-4745-bf76-3c49414d10d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e48aa76-ffcd-4bb3-bfbb-3967f05752a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd57ce2d-cdd8-43fe-891d-7990b33086b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00ed911-73e4-42d9-9360-45f10a08347c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e332454b-592a-427e-997d-69c32b025e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8308cf0b-68ef-465a-9b2b-1be1c7553556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f45798-5641-4a5f-be5b-de1adafddb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d277bb-e29c-4012-8565-148f7d2d1f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e02ec9c-312d-4bad-a5e5-465f9b4e65b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--57d811e5-e84f-4fe1-8573-d03a1fba7bca", "relationship_type": "indicates", "source_ref": "indicator--9e02ec9c-312d-4bad-a5e5-465f9b4e65b0", "target_ref": "vulnerability--43478ffa-ebdf-4d2b-8127-38e7432e863f", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b934431-7e43-4093-8919-174210b2c2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc5002b-f2e7-4d6d-8aee-53565fa2f810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.89.75.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65fa123-21fe-4362-bdbf-88a38c4934ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.9.90.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9eb4d0-6117-4fe4-9c24-1011ae1ee6ad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdff2f6-df65-40ef-b733-d0ab57c8ef50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.197.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c707c038-44e1-40b8-a643-81c22ed0400c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.176.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5f7463-f0cf-45da-8c82-6e6d23c38d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d246e7-63f7-4b6f-91cf-afe69df9bade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa74019-ddce-4d79-a832-45ec9863ef40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab1f2aa-7611-4100-9595-53aea157d74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.104.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92350c8-0106-4260-aab2-de2436cad4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0067c864-afbc-4445-b015-f9e6fecff5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6271c369-e757-4c02-9315-0f93b9d91a86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.215.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb6ab83-fdca-42af-8224-c6d918ba0851", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.244.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7f38e6-8d2f-4514-a681-1ed5523f9fac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.244.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abca8df1-0215-448a-ae6d-0cb69f911bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.15.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910bb730-0fb9-4295-928b-76a2b76bb185", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.96.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dae51f3-0e83-40c3-9798-6154368982f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.95.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8340aa5-74e9-4518-b48a-95d8d528dda8", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be264b58-9a02-417a-b4f6-ede9cc20b55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86981f3d-9a32-455c-a38a-f4ec10decfd0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d7d22f-255e-4002-9750-bd281df6275e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.226.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9dab71-6eda-4e56-afa9-8579f060bfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.77.222.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e0e7dd-3c5a-4533-91ad-70323c11dc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.91.111.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46b2ff6d-8a1e-4c81-ab27-97e77198fb67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44ea605-c462-4ae7-868e-629bfdb8ae5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.88.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8315e7e8-513a-4b18-a691-f1fab3d485f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f38a1f-f9fa-498c-836b-a07e7d00dd84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2d1924-e209-450f-83ac-40c3b0803e4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3d72e2-62d8-4ff1-b78e-694f71c526c1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de247362-501f-4f33-a2ec-295756b0999d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67fd8fd-211c-4091-88d9-cbc11f6de0a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0dcc9b-86f5-4bd9-888d-cd29202ed070", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3130e97-78b3-4625-a0b6-3f35c5ba1f53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--490d5910-ce12-486d-b3ed-cff3f44ef500", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da9aab7e-650c-4050-a810-93397980d68f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--074526e4-326a-43b8-baa5-5f3f88bcc0f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7359456a-aea2-4a96-be41-2de494939f08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d45971-d396-4ffd-ba56-9df0e6cd3867", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a8e771-5b76-4a27-8595-af51f5072923", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20270587-e401-49fc-a0b7-56999cb89fcc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca109e0-c241-4506-ad4f-fc02c00e794e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55d052d-1cdc-46d4-a1d1-a84191fe2afe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b72045-1d89-483f-bd47-bf55d5af6a0e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8ba205-cd6b-43d7-bde5-373f631c7461", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c6e5e1-8b1b-4f25-a59a-21f58b41949c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a746940-90f2-4134-808f-010fe10b0973", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1e3fdc-5643-4e93-bb4f-f2ed82ce6c1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3225b18-903f-48ec-8075-59bd788436cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4203d0-7bbb-4bfd-a0aa-aa0c6e082fa7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33eed6be-4f9e-4498-8cd0-383f591b5c46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedd0b5c-1ec5-4490-88e1-edd7df6fb105", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c42ed3-e988-4042-b8f5-bd8f4233a15a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359693d4-1f82-49c7-8be0-e3f82c37a7a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967cf649-502b-4ecf-a686-d6bedd67a1da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46f6045-5b77-4ffa-8ac7-24ea427f9fe2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb17524b-9426-4145-9e92-bfdaf6754830", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a45f908-e54e-4ef3-88ff-5fe8c07c4da2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642f726c-f9dd-4cd8-a7f4-f908fea17c1c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6bbf10-0f0c-4b6c-8b6e-6d25e021b44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.174.144.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698ca6e6-8f3b-49c5-931b-b5699667177e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.176.211.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3fce91-340a-4214-880b-997caaa4f46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.137.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2253770b-94d6-49a2-96c5-c4825e001722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.157.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c237f6-15c1-47b9-b16c-951515e7c8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.158.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ae70d3-b0c1-4820-b8dc-c79058b10de3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.178.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf17dd9-0068-451c-b526-300ac8dafc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.182.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb68abd-0fa2-4de0-a0d9-5c6231ece1d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70bc34c-81e5-4af7-8bb3-1951f3f791f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.132.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a580d1-8f7a-4c91-874b-e196d6eca04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.195.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e5347f-32d3-45c7-b295-ac03fb634f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.6.59.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc07e9a-c14d-4abe-872b-45bc16dac6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.72.180.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42fcb0f0-d8cf-4cf3-9311-e6fb3cdf5ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.87.193.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9819f4-279e-4cf4-bc33-aea3dadc89e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.2.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b9183a-f170-467a-a3f8-558e4e185857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.88.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b51328-b5ba-4ac4-bf92-1842fb345f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.147.177.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f59113-3fe8-411d-85c3-bf8903f1593b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.53.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d40a1e-b42b-4350-a4ff-e09cd2c1e108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.27.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6054ae1b-36f9-4d13-9240-f3ad529d3bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.33.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be3e2172-2f5a-4222-b081-9b29a719888c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.208.18.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7fcf71-4a76-47e2-a766-e1e722f93516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.56.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d5f8199-dc44-41f3-8736-565232c26d0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.19.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0777d702-c14c-463f-846d-73242bca3825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.201.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4ffdf7-fbf6-4aac-9e06-80e72b80dabc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.236.21.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d0c427-7409-41d9-a851-072bf57809f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.147.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86af46b5-78aa-4e02-bac1-d6a83567857c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.52.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12940604-f6e2-425f-9172-63584c815ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.94.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a7895c-f6d3-4357-a993-766c718e6575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.154.241.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe90f0b2-c8c9-43c7-8ee1-248721a5ab2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.124.86.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb5664d-0469-4b36-a754-6b0ce83b1303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.56.204.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae2791a-eca1-432d-8364-92de25dadaac", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.151.248.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017c06f4-fe8a-4809-9cdd-1f476b0f89f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.16.212.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13f21cf-cbaf-4b56-97fc-612e4eba7263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.24.226.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60878c23-d169-4c27-913f-3b841be69c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.52.101.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc40a40-e508-47e8-af36-37819eec38d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.179.156.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d585fed3-1f7e-407b-98fe-4cde7c9b717d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.179.23.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b51ea2f-45af-403c-8409-acbfe07767dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49cc268-31f0-4ee3-a1d6-12c8579bf66e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.136.151.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beaebef1-331e-43c1-baa1-f8fda6ecb3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.169.106.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b779a70-8492-4106-8e56-185c188b3e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.222.202.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34697ce-0b98-4fab-be78-361aadfc7e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.56.193.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bbd977-0dd4-4f60-991d-23720a1851d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.182.85.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008cd6d2-a264-4a67-8135-ac352aebb2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.199.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6595cd32-5efe-4018-8309-10dbcb96f04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7783a0-024b-4cf6-9ec0-48892f4e45cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.108.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f8b13e7-ecba-469a-8af8-25ab7b90e291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.109.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70681f93-259c-4f09-b602-84b9afccbb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.117.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b04dae9-834a-400a-bea1-03cd0f74b494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.59.76']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a76c651-304a-41ed-8ba6-d80cc9fd20a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.209.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13d36a50-5d5c-44ac-9477-1f8b5801c9d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16c50b6-8864-4698-b556-ef019ed43ae4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a85f44be-7111-4814-8eae-49cae7120bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a7bef58-9ea8-42c7-8897-3ddafb5d89ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abca5ef6-28c6-42ce-9b5b-dc656329405a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557c866a-55c5-491a-9283-2168036ae54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590c207a-bc36-40ed-b216-9bf3c49907b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbbcd12-038a-43fd-8aa1-ce18bae91dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5472f341-ef8d-462a-8174-b1942a9e909f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc4786c-bbfd-4bef-8697-e0829574569e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f75cea2-2e35-4a49-8fec-ee615de85c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eb18faf-7127-4e61-8d0f-bcfa293956f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13a6bec3-1719-49ed-a806-6a9521e5a573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f458dabe-4f44-4aa0-84a3-0803388d7260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc426a6-8081-4eaf-be5d-fda17ed6aa4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c502b2cf-35ec-43ec-a53c-d8969f1d8b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f44c280-0b74-4cab-9b86-ed34443811b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35255def-621a-41f0-ba51-62e885d1d306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95c0ec0-489c-48fc-9ccd-9af8ef3ae30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c42d0f23-ffa5-4dc1-a03b-8304b5cc8df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d700fc6-4a24-437d-b743-910f55b334fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50780799-c403-423a-a33e-68c89b50bae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3802af0-7909-45fc-9f4c-2a1864ce1ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac95d536-e79b-49a6-912d-8c357e6a7a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3904b4e5-c67e-4ca5-902f-ac5c26142d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12db0fa9-d2c3-4bb7-a81e-5395b8b45b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8df988c-0619-43ef-9623-bba02a6fa07b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9894935-3e7b-4cb1-b2f1-4d2b2e046000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e980075-f328-4cef-a4e9-ac4da0d02667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6328b02e-3c58-4d3c-9a2a-2309ffdd0bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7e5f43-5d2a-4c26-bd63-3dc952ca5fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c11d2b-48a4-4f6b-96b8-abc3522c0dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699912ed-9fb3-478e-8d6d-e59a652c3a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d263ab-8607-4e5a-b95a-69a13ea64866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba12a8ba-4c57-4782-bcca-99ed7f08b8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17995576-2cdb-4d87-a69c-6f28d6f5e0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de545bb-0da7-439b-a3f7-62130feb11ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a204f6ba-9595-455d-a50c-5aaa9b56b5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf36be65-27cb-4b54-b35a-e32ef75b80f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0928fb-71cc-42c2-a4e3-a4b240b33953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62d11aa-2d4f-43f9-84eb-202b6a974c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef81c598-d846-411f-a9ee-f9571f7eeced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4b0937-6e59-4f10-94db-dff1a17586cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1d4af1-c8ec-425c-a7ee-5ca5426c97d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf188771-79de-4f7d-820d-4f5fc4ac4da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cd3590f-3271-4bac-886f-58ec4674f00e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f0f598-34d9-43cc-8874-6299e599b1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5732e015-881a-4bca-adb7-ee97e7876712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b1cedc-9b82-4347-9feb-afc74838c10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613fc8cb-8638-411b-8eb7-d2a4f878eb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e5becd-8a84-42d0-b695-c37fe1888d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73db47c9-d0fc-4fcb-b76c-86121d4257d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3681bf-b267-4010-96c5-1f363d6b7bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbf89d4-b58b-4aad-806a-c86b815077fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5c98a0-3188-4d75-8f4b-a43b2587f49b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0583e79-c9f4-4317-af7e-d92ba454d36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c12313f0-0b0c-4b3c-90a2-3db5f5ef790c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3047be31-64ab-40c9-babe-8469756257e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4197e33b-9478-4ed1-a391-80913e6d8219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08dc936-2b2c-4674-a917-459bffcb353b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7489468a-8d8c-41c9-9832-46f82d7613d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7c6f90-75ab-47d3-904a-6c777d097b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e452a5-ba7a-4bec-82d4-5a05042278e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.92']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ea7dbd-223d-466f-a647-6e6eaa91c19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7ffc855-dff4-411d-8c2a-ed03092fbdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0664ea5-3c98-4b17-89d0-8dd028dd6706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a613b75-bce4-4cdc-92cd-952c2a28b7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baeac255-4821-435a-ba3d-8deda8dbccc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0b6ac0-421d-4503-a3ee-89348bbe5566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8442c2-9c73-4d2f-9257-082a76756d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d55361d-b617-46d2-b7dc-4577f2c40b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b61c9f-4ec2-4faa-9e99-9dec4fa28285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7c4110-f13b-4cc2-9f0b-9255cb0018d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67efc518-8933-4682-a836-bfb413652588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4ea45e-6f44-4f90-8d96-d7f3665e00f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7846ca-7d21-4eab-a097-4cb8c586e660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69df5c99-5b4c-4984-9845-810061895db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354fd60a-b615-491e-8d2e-8f9dee822b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c364c7-78c2-4e43-9cb6-de5d053f034a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bf0370-4b74-4d35-88cf-dd9badffeb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad1f2f7-d591-4a05-8212-11cd9694fd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09e57ad7-c8ec-4cbc-a3f2-13e6fccd52c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc369980-802b-4af7-b171-608b23dc147c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5a425b-e233-4a7d-8ae5-130007bd3901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc205e31-bb02-4284-885c-2a43c8b9c9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46296bc-f4c2-4f5e-b7d4-c560edbeb06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1fc008d-94c3-4636-b378-844ac0cbeb90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea5bd2a-ca7b-4e26-9a5c-32348edc2a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22d5a3b-0eeb-400e-b9f6-ab04303ff3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4c275c-848c-4cab-a9bd-7760002e8546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a87f03-5135-45d4-92c9-f73e7a723f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.192']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadc0a76-7303-4841-9656-bed3951bfefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a151fada-42b8-44aa-81b9-e55249b82399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8150d0-26f4-4bc9-b710-ee05d42d0852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801debbb-6e81-4491-9625-686541dce8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d9f53c-90a0-4757-a3c3-291b30fc64a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67273ab-0f7f-4758-9a21-e680b8c117ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3208fe8d-67a8-4e00-823e-6ed958189436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a39c97-8c40-43a4-8eda-2e17d614147c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3c1c59-bb37-4c67-a1ae-2a1ca1393815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a914db90-3194-49d0-a04e-f9e34432fd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc6312e-2cee-4113-97f8-804a9e6ae8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1db302-69d7-4ff7-9f61-bc3727d429fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e161cd-3352-4323-aa7c-8c2fe3b452b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0ec9f4-1686-4196-a911-fc5c08f9e053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4e4e4b8-a74e-4f7f-9216-bdef3c015fdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477de23a-9862-4e95-9873-4f2d17582162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799896af-075b-45e5-beb2-db7e66f85bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3300f67a-bdf0-46a3-93d3-69608eaa1b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670af077-d09d-4eca-9ada-bbc4d3d83ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a56cfe5-a609-447a-8431-81d303fc3943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3f9bec-61be-480b-8501-bc86a583c4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8011a4a0-962b-463c-8bfb-67c611dd8c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c038598-f6a2-4c37-84cc-6f063bf51bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d4b7ab-7160-4585-ae6c-e4b7b44796d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fadfc7f1-dad8-44b7-b51e-4900ab3179d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19011e4-4f05-4272-b6c6-3b4adedf4141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbf55c2-faad-479c-84e9-fda7c8df8755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714c42be-4e54-4d36-94c7-e31cd9ba2c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fb2f1b-19b3-493a-9f3b-6aa1b52d7547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f85961a-8dd5-411b-b5d5-69347f9123ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460b8b81-7475-4525-ad5f-dcf33f9d9304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00e9c42-dcbe-48cb-adf1-efdfdfd3ee96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8ba8a3-0959-48cf-9047-46bb8c6ff95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cd6b18-10cc-4642-9a73-b547a8e66ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c240d69-f1d4-47fe-a7db-c4255a2750a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d6daae-718a-49a8-b5a1-2cd796ec20e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5405ef90-a659-4f26-9583-80d925a21d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff9a442-4f55-47ea-94ba-fc4182ad6e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381dc898-3ca4-4249-9db8-9231282de215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf40ec0-2b3a-4173-9ae3-58cd137425d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--755b293f-0b8e-45d0-8222-9a88376f3249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9494ad32-9c41-4329-917b-a887484b1dbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6eed5ac-d3c2-487a-9637-be8df75c8018", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62767422-dcf1-4d89-83a1-3776aa18c570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16c1055-32aa-48a9-8004-d7397d2300dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de53b524-cc10-4821-a056-9028b1022d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30cc3f68-4828-4b47-9f9d-455fe8ec90b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4fccf8-aed3-447f-b8dd-ed5af1056cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c689f56-c76c-4c22-8c93-41b7dca5f307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ad23eb-cf56-4a84-8bb1-31d7563bcfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ee2815-59b9-4030-b449-b41270fba986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b64c3fc-dec2-46d2-abf4-eda2422024cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8abd1e-9c21-4c2d-9812-883421aa62cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51137ee4-995c-481c-9ee1-b49ca374360a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e92b2ac-91df-495a-9ec3-5a8dc7310d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaabaa73-5ded-419b-aa04-0fe9643d43da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53190ece-6408-49b7-82f1-74426c197d84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12be8236-676a-44d4-825c-69d8719977d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8229d7fe-b4e8-426f-9949-3aeb1e97c776", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.183.234.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ae2dac-d857-4264-a6c2-8abf627418db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.197.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991c881b-bd42-4626-8f5c-4fa73b850057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c34900-375a-4487-9ef6-4552326afced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71803d4-01ed-4a14-8a1e-31bba6b46116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674e9512-efec-4219-9ddb-4d2ec7d4d64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--248eba49-01f9-471f-950f-95e7483d315e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc85e5ca-c38c-445b-beb0-27234c891bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c36fd4e-60cb-421c-82ac-e8b93235dbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64591bba-adbe-4a60-863f-c5b4d47ac8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542a936d-4f65-4ea8-8e2d-f4dafbb7dd81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982a6c24-c543-4890-9767-d0f4c52597ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e937bd67-b52a-40e6-a325-2b62313ddb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ecb19d-8999-4c59-8dda-d478ee32444f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a796190-6c88-4fba-95d5-b41fe66f4678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1660ac2f-dd58-4020-8565-0f94ffd785d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc264f37-4451-432f-bb43-026b25834746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6e5cc9-e35a-4646-bc9e-09f031cf3d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ace0b6b-54f3-4845-8535-796a4d3faf95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de442d9-fb1f-4171-9cdc-595f603e58d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceaac199-ee42-49dd-81ce-2ae3a7ef157a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fb975b-381a-4db7-b9c9-aa55bb441636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c779f14-7863-4bed-a7c5-2285011c2368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af27ceb-fc3d-44d2-a094-1285352ae8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9810f67-bbef-4f5f-ac29-bd034028cc9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e670284a-1dc9-4039-979c-6c3c37513874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479d393e-d84e-477d-bcc6-c2f09ea7c397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e36defb-314a-46de-ace6-d62781008ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181a28af-9e1b-4da0-8e63-69fc059b1f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f447cecc-e312-4ac3-9d75-23645f7a8c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbbd42c-4c7d-46b0-ac89-374e409e4c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695daab4-c29e-43fe-89f8-7ed2f77adde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d98e4eb-f731-4b62-9270-71b584a7f3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00254cbc-88e7-4a2a-87ea-2bc1508b5667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511cb801-cc82-4795-b3b3-7e7c247ccae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecf8301-b110-4bba-b1a1-0c1eb2ac0f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbea31f-9a58-4dbd-a0cf-0797144a2d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3731d883-34c6-4216-aaad-bd9992027cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a62206a-95ab-44e3-b4ed-8424dadab3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea23d4a-5f33-4f81-bd4e-d7e23fbd8436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5544f928-0761-42b4-884b-9a22cb82bd26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d73f95-6129-4835-8678-ec38ca135db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae7ed43-aefc-4fae-9292-dcf50abe5d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0efb23-a99c-427c-a012-3b9ee712bf16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f619f11-553c-4084-b1c3-b382591bdb36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a8e42a-3601-435d-9d3d-25259e5423aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5817a7-e938-44f6-8a40-41675dc3c7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1ba401-9aa0-456c-84bf-10138418aec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b126181a-4946-4f0a-902a-9c15623efa45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2cca9e-1ac6-4dc5-8018-bbece016a109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e9fa4e-a51b-4b32-a88c-d11c922f30cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72815a9c-6d29-4809-9c6e-c87ceb863455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d091d771-bb62-466b-8751-365bc182d185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8abd827-8547-4859-9ad6-d2368d179300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b75324-4fbe-4045-92be-56bd53b5f517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e720cf-1325-4847-8a91-c97ddb3d058a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b78513-c2b8-4bdf-bd4c-57bebc6ca49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef469e4-64ca-4658-b1ab-dd2903529bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8e9e6d-defa-497a-82bd-9d46c04cae09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56f1f26-34b7-4f94-a511-4105f37e06f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b69d5c2c-e778-4721-bf55-69474c170a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff3a0079-9b2a-4e1d-a572-371f91b521e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fcaf69-b5ea-4215-8674-c20dd97e79cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d6d22c-88aa-44f9-9e28-04d8ba01a05a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac1ae4e-d43b-4567-ba54-da3dd08e6f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5e7d44-7b45-43d8-afba-8dd2d29129f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817bab0b-f1d8-4a98-b270-8f9408b42742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84514b80-f648-4fd8-a0bc-c3d6b97b3456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b488a88f-d7c7-4b4f-856b-480d03c6b097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f3ce03-47de-4775-9a79-3766bcd2b1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1adffe-d97f-43bb-b0d3-2347e4925a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c48d8b-4485-4353-b66c-3678871bf1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c992477e-f653-4e1d-941b-6cb45d01d844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.68']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473c3e60-e0d0-4134-a045-d9135ae44318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e363d775-c18b-47f1-ae8a-b916dc949f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f520ef-cad4-434c-9810-d90a736da25a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.84']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9904a540-8d14-4ebe-bb4b-45b38c9c3edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1513e2-a217-4ba2-ae50-7dd9f7794781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d788b1c-b252-4339-be60-58fe363cb2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6031f20c-6e06-41fd-8ed2-af4fc7462541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a59865b-03bc-4305-b0ed-360a36f1dec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a15a6fc-d63d-4c7a-b174-fd664405be08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08474934-c0e8-420a-85f2-9fb3fb4cd912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--660775e3-bb67-4356-9aa6-79dd3c408aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568dc27b-7afb-4828-87e1-a6971e4efe36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.5.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7499f2c1-6fbe-4ba1-a53d-69ce3a5b2b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76ccdd5-a412-4f5c-acee-4d2467e3a321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b16e40-18a2-44b8-9f03-209ddfa8d157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6fedb5-0d73-45e0-8086-b238356ab611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445207cc-4205-4a40-946e-9be55b31e8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.75.210.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca123af6-3231-40e9-885c-306b15452832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6453d749-3c5b-4649-9a6a-6ed60a6812ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49b4881-92f0-49eb-bfa4-9ea99eb67447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af778f0a-2a09-499e-aa62-eb06090ef1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e9c102-5c79-4dbb-89e2-b65d8adf68ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05466d88-07d5-4de3-8d5e-668fd8930572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0afeff0-d2cc-4a87-997c-a6461e281135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa4b175-bdd9-469e-a181-36bd850a56ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6e911f-4bf3-4c20-9a6b-ad4357136233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943b3da0-f52c-4036-b04b-624c9ffdaafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504bb665-e678-482b-a992-23121dc4a948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59eebae-52cf-4469-ae62-128a37ea8caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073f0ebc-ab8e-4ec4-bd80-7b1e32de3fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333235f4-8eaa-4121-a20a-93453104d926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d60ab4-befd-4f5a-b31b-eff59e39fff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec20fc42-e0f9-44b0-a886-2ce2bb97d328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb990aa-6c76-4a73-acbd-65aac78b5478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af4a760-6263-4775-a7ab-20b3df0fedf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bd88ba5-4129-45a7-93a8-5307fed068d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0895ff24-7262-4db3-bf16-1a02db557f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa2ad90-9b11-4a7f-9cd1-cfd46b6ecdd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b5c758-8a09-4549-94cf-c3ca29670c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e8bb23-71d9-4ffa-bec8-1ac3eaef6ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c6a7b9-8d84-4ad0-ab86-c6ea04e3d03c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82eae10a-80ba-43d2-8186-e0726a41148b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966cb844-a65c-4286-a7ca-b61c6ef0592d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d13f07d-10bd-448d-b10e-e51562a19844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd61106-2da7-457b-bfb6-f8c63e6287e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe6678c-0367-429a-ac5b-cf1e2392bbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8c253e-e3c9-4d8e-8f50-9c823cd43486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55df42c-7c3d-4da2-843c-411976f50618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c50121-59e9-4d96-a477-114c84cf7071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3afd01fe-45c7-401e-825b-29a46eac3f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0195aeaa-b800-40ba-b43b-6cfd027cc7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b65c343b-2110-4c40-a546-0ef73066a0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe9f769-22fd-4b40-bbbe-deb829e41b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24894dee-8b53-4b35-b8c4-aa21119c7c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bae9c59-4532-415b-8ab4-406e03a8ecfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0993aa7-0da6-441d-9b03-06cf66be358b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7774bee9-96de-4dea-8b0c-bbfa363c69d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c62e22-5fc8-4e50-b4df-d328f876cd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1576f100-beda-411d-98df-bab04bf9ff2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d23b7909-0322-40b5-ad0c-91354d65aa8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b929a2-ac1b-430c-9539-6a87bf7373ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f81756-8f21-4443-ae53-09e4db3a2e91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35527829-a8a5-47be-98eb-974338a228b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df674a49-c8e0-4a3d-b54b-50a441c193b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aaf47a2-096d-495e-8975-a056f253327f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567d03b0-d6b8-4795-b760-bda4ec5ea87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4312ce11-cbc2-40e4-b616-9a4fb9d81ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f343b48-d800-489f-bc6f-fd071c4bdc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351f19bd-0cef-43be-982b-503b325244fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a204d27a-94d0-466a-a669-bb11a5d62889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06655b6f-169d-41f5-bb41-cf5603c801c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ce9d17-9cf3-48e1-9bcf-5b78a07b0071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f77dd7a4-8bbc-4dbc-8730-4b5dd9aec0ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78610a26-6b5b-4140-ac42-3e8bbc1155c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea3257e-9465-4543-ab06-0196ce5966e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e035281f-71f7-492f-ae63-99e1404a7f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7444a0b8-ce92-415c-81f7-d36138b91e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99226b32-1e74-4eed-990b-2925a3a8e133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcc8112-0f2c-4484-8354-8b6659589581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166cf69f-c965-4887-bee3-a9086f8fad30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93600801-80fd-490c-bb72-04a02fedbafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e1fdfb-efb5-4c59-b725-ce0178ee3bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756728a2-24ff-4ce7-90b2-a4f3e60d1598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e832544-471e-428e-a4ff-60fe6210f2e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6936a2a-f783-4071-ac56-d58a487fa1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f63458-679e-45f8-8db3-4e87450b2a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29d265b-f80a-40af-b62b-a3a6c3f09b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c08de0-af99-44d4-a3b6-f9378d58f262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab63bba1-513d-4b49-a601-64690bedb3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aed382e-6a19-4531-9199-b084b0454c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5045b078-fc95-4dcf-bd60-b5a4b2ee6978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b8c1f6-9f95-43f3-9869-00bc057f0756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a019b01-8c35-4559-8e29-f846e1cfdf86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b02ed52-c447-48d3-8771-1e9e64b7960e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e93003-3a88-47a5-8fe8-166c77873981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f8853d-c61a-49fc-8d2b-07e3e7e10366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2feb057a-7702-4dfb-8d70-59730e42a85a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c57ffa3-766d-40eb-82cc-8469b16430be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdef740b-4620-4cef-a40c-5781e62829b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a418ec1e-c4fb-4aeb-97a7-96fa05bd6bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4b5b1a-cdcb-4f3d-b406-82334c94cd5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfe2965-e110-4db4-8dd3-5510dcfe8472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab80a8c2-49cc-44a7-9639-c056854d3bb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3eaccec-37c0-48ac-9782-61d73eaf96d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310fe329-4063-48e3-855c-29aa38626aa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--183ba511-3726-4fa7-a73d-dbb99f0bdfa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76436393-5403-4bfa-8863-1770ae0e4464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549163cc-3ba4-4126-ab3e-e5f63f6431c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841c06fb-438a-451a-8a71-01bd396b9a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c869098-18e7-485d-988e-6441df507019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f001751-40d6-4f13-b072-aa1bfe3512b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9e168c-6978-4c52-9f60-305850571237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6d6d46-8dbb-4878-a9f8-d4b2b2920cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0a172a-284c-4b07-8f6b-17f58dc0d0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5183db07-9f59-45a1-b7a9-f4dfc963e2cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0720246-def9-42ed-ac8d-308b85c70624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07fb598-f35e-456c-949f-268c6d1d4229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84355e82-e6e1-45af-a3cd-9cf847e79a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11baa36b-8c01-4c8c-b6f7-7c02624e275a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c83c0603-8f14-4652-bc17-c37f715e8376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbc2c73-eca5-4673-b61c-6934a5b17c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62768205-56ce-4c3c-be63-8ed1df11f156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cbd613-2bad-4774-af31-173a47bf17fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97883330-9616-42da-89aa-ac3e94360459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f279ce6f-223f-485c-9ac4-cce83134e71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3657180-6704-4d4e-ba97-9ebfba3ddb7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d441581-cd0a-4af0-9da9-c72935ebe739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6dfdecf-453f-4bc7-a3bd-ae96f3ea4266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ed58f2-7303-4267-82b2-08095680f991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a795fd77-8be3-4654-a667-5727ac2bf02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--931a80f4-72df-42ec-851f-29f92ebcc321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caf14c6e-af32-4336-aeb0-df15a67f2883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96da0020-0f6e-4b6f-8f0b-9cddb9ec4261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5acf9de-9661-4e23-ae63-2d214d48f3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daed50b8-c3bc-4dc8-ad63-3f7d6eee0699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400ae7b3-c934-4f67-8486-39a006088583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bacfb1a4-8123-43db-9fb7-120ffe931c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbdb140-de62-4207-a996-b1c037eda937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b0b3714-0b48-4256-9f81-d9b79aa99446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2906f8f-bda6-4dba-8c54-72ef7746479b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfacb99f-69d1-41f6-8525-73da9a764652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159e9177-8eca-4ead-aa30-cec7476d7a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfdea15-b9b4-4a94-885d-2fdc58e61f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cb77f79-838a-4855-adcb-60c6e010a450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1477d3b7-b22a-4cee-ad4c-bd6d1be029aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a394948-e40d-43e4-8995-e1e4c930a9dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e502ff00-d4ed-48f2-9206-93a4bc87f9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e58343e-5df3-46bc-b3cd-a94c422a37c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98e764e4-f799-44dd-9d07-a7f395ea2400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323361fd-7d3f-4749-96f8-dc1295357769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f2b544-c86b-48ae-93b1-b1778265677a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5836d483-c35e-4fe0-8f2d-39c9b5761176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481437bc-811e-4568-81b8-b280324f80fa", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce41360f-2fe5-476d-8d45-5f6e51566913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.120']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bace57e-54f4-4cae-8624-e0b2605f707e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d094bfc-08fc-4ca5-a070-3a81a9499b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d47a33-bead-4391-9923-29c579459e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a0da23d-8ae0-497a-b3a2-2792c633b34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df031399-e7b1-4fc2-8d86-2a9035fa54c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841e3839-5a66-4bbf-8f28-ebaf33eb2cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ab8b49-1dad-4dd2-affb-661029519133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be74d2f8-9fbc-4955-bde0-57d43cdfc340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b69d29-edee-41ec-9523-4edeaa9ed021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4c350b-2cd4-43b0-bd3c-107b06b3cb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712e5bde-83d3-45b9-9e9b-b365d0d9e2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40433625-8c88-45b7-a00e-74f68b884f12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829462c0-0056-4c08-9216-cb0ad1620a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c632f701-8278-4c5b-91b5-66eb09fbeadb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9c6130-799a-4202-89b4-b6dc61025cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c84cddb-464f-4467-bf71-31278dd6de24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41efbf4c-6921-40cc-aea4-9c71171623d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4829593a-993a-4d0b-a474-db913f69458e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f4e0424-1941-44f0-b4f2-d58af901908c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66da9871-58b8-40df-83df-ae5ea08f364e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fccdb43a-0625-438f-9649-1dc471124a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.53']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d56699-556b-4fc1-a21a-411d204e23d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa5a5f9-2926-46f3-beaf-0a55cdaa4f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b9689d-dbea-48a0-8186-b975b3944306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b5053c-0ff6-4fb3-a2fa-8b35009c9812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231e4ba2-8710-4d0a-a3e5-8c5dba23edcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8461d284-2f1e-406e-b249-2d34446c7c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80014c44-390a-4337-bf18-dd74a8797170", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e7abc4-2bac-4503-bdc2-438bb54ffc7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f856987f-8a29-49ec-bc7a-6d9975c653b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cdd4f6d-f999-4aef-8098-bcbf724a47a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f32571b-47b4-4dc8-ae25-448ec7160e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.96']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9fe8b6-090c-4542-a2da-5fb9196206b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35edeebb-9095-4998-9725-3bf1432b865d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c054fb8e-bc47-44de-843a-9e6fbb51262b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2550c29f-a357-47e2-997d-9092ca35263b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f44f24-d610-44ea-81cc-dc7bda296b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--007ac3c4-b7a7-4746-9681-e3a4d67252e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26ce83d-1e34-427d-93a7-bc9a6b12466c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8a53fe-61a4-49a6-be61-1749df548f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e885e9-0c15-41b5-ac54-626ede9fbe75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ebf16a2-5f61-45e1-aa3c-9814cc8d8d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e477679d-8c78-4189-a8cb-8524c6df4f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4fb80f6-2306-4393-a930-fcaeeed1be17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e56e45b-b14a-4e1a-9156-b202fb56c355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa109d9-653a-4f7f-baff-d5c5030cfb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a710031b-0358-484a-82b0-602fd584eb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ced8a1-9aa1-454d-8322-5eda27405aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa829cf-b35a-4309-b732-76e1fac0cc9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--541da5d3-56fd-41fb-8528-7cf8b8325d21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3aa506-1577-4914-b395-84c8b0c6be69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938ed493-30fc-4009-8a90-0faae708f79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41452292-a698-49b3-a743-edbdf0bb12e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3b0210-91c6-42bd-adb2-3cdfb7eecb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a93bcc-c69e-4832-8c3b-640b0c195873", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f473cab4-37cb-4a92-9d79-ab4c58db91be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72359956-ea10-42e1-8e39-ae9ce3322683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c90941-9c9d-4e17-9881-c91776adf38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ea85f9-6f4d-415a-9483-a58394fb0a47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92e5632-8de8-4fd1-bc40-7a719a73d14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.82']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cbe72c-816e-417a-8b9f-9ee6a42526b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b18a5e0-a114-4df9-ad01-7a20eb85b183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50adab37-d76c-4a0f-b6a1-3bff7150c2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.129.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ed69cf1-d297-4dfe-9d13-7ff319c28675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.143.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a980551c-5be7-4afe-b5d7-58bb44237593", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.189.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8909a124-7a70-45e8-b50e-45c595dc32b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.88.63']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380a0962-7fa6-4e74-8aaa-fd55b00a6866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.92.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ba2c4d-5a80-42bf-b305-a7f087340b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.211.218.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7649d3-58bb-4ce3-8abd-de90b8baa662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.230.58.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38cd065-973a-4fcb-9ef7-b8da94910153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.191.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10428e2a-b70a-49ac-a996-079c630bb6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bd2276-5912-4823-b10f-28abc92884eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.234.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59b5373-bc2e-484f-89a8-05d421f2f705", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.40.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90be078-75bc-4d3b-89a2-1628bf4e475f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.40.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b30424a-7ba1-4a3c-adbd-972efaf9013c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.37.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973630a9-31bc-4dac-b6c5-3bf7ae361975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.203.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b4bf0f-0d0b-4626-8a97-3e1d3acb6d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40280337-b400-473d-b586-5defc5b4719a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddfc63b0-0664-413b-94fd-021cae28221c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.167.148.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1e75a7-38a9-4220-8d2f-1b5a8a86122a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.167.203.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b7d214-4d90-46fb-a4e9-38d4c241f7c1", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58717004-9c6b-4059-8998-ae4cd85dbb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a41a5b9-0fda-4ff8-91bb-c3451eaf21a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f6fbef-3498-432d-b00d-238b0c1d4252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5589c70-2c7b-47ad-9f09-da626f2bc5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d1829e-7ca7-4a73-a648-f2babe387a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c661d155-601e-4010-b1b1-df3550d2ec89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--390aa3a9-18e5-4930-8c93-e2a9a6019f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86946e11-3fe8-4874-bf2c-5dd6850cc02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c6d9b1-f88e-468e-9756-383f3f716fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e38e1e1-8487-4f8f-b45b-fc7cefe0b2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772e4748-b6a5-489f-9145-0850f1bf2eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4c42a9-9db9-4338-aa51-70ca3f17e3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b3c3a3-363b-4ef3-83af-f3bfa6348ee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf24def-55d9-4fd9-b18c-9083d116640b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.172']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ade2284-45bf-4af0-8b44-f87ca7b442ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6485d19-205d-4fcc-80e4-165e7ecd6dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.182']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8902ec8-4995-43b0-8661-bc256f454779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d80e29f-a1a6-49a3-8d65-910c711917cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f3e42c-a1bd-45be-9634-9fd5bec2b462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c2d687-cc93-460f-870b-94beccfdd35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef6209b-26b0-4318-9b2e-cb5b2f606298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f35755e-12aa-435c-ac92-296a2238a9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5290ce5c-7ff7-400a-b14c-72851ff3a635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--246ade18-0675-4fc8-b84f-92bc69fa2614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507e329a-9c5d-400a-8380-bbd364e48f1d", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.222']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2dcd18-d82b-4d00-a98a-9da71d0d31bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4c6678-9186-40bc-b34a-c3d8fb692aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c6c8087-54c0-4930-accd-66a5c3de5f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdce1eaa-623c-4607-b09e-a90807d8201f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a86f574a-7e08-4e2d-96e9-7b46c9020321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd02e9f-35e0-4837-9489-7025fd629125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569f9cff-bc4b-4d5f-9610-c0b398594de0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a548dec-1931-4116-a6d0-f5d06f17b641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13873064-fb50-447d-a34a-abee7b2f6a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ce1846-b174-4c00-82b6-b772b72b69e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856fd317-8c7e-44d4-aed8-3d61455e7217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa81450-19c9-4f19-ae28-352228288bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.242']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913ffeaa-8f29-4121-8755-ae74bfc6f6ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14863c49-c255-48c7-a9bb-03cf67639e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.248']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898c2a9b-d8be-4a3f-bd2b-4d662223db85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c1e1ce-8d29-4a33-870f-cd571a1080c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd48cbf-8ed7-419c-b6e3-d7865829d640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57888814-9335-46b4-a9ad-bbe8654fa582", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54821d15-dfb2-4067-a8c1-4aaf5dc20bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e742d33-30f1-4f78-993d-ff188ea804a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31cfdbab-555b-4fe1-aeb7-df621eb91f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d35e5aef-9526-45bc-b66e-053bfa59e662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.57.172.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--906fc00b-e003-4096-8e25-77da38e5e39b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.54.182.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68705f9-3ae7-4aac-b4b9-006ecf615925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeb11bcd-d9f2-4a5c-8821-99ada043f7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b36184-2832-4c30-895d-f257a7621838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7557c3d3-76b9-4a7d-b6ad-2b5c65a347e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4565331e-f94d-4f67-a43e-7d320cde1e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b152455-849b-445d-9be0-e189943bee5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d31be88-dca4-4a81-a4b7-76fba637ba67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ea8c6d-f962-4ea5-823f-93fa26d9126f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee3d74e-e143-4653-9aa7-a27d9f8ab8b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7baf730-ccaa-4374-be5b-172c72dc082b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04aba42b-a0f6-4058-a893-64d3d34150f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7328dcf-a704-447c-b108-f762968d855f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa9af5e4-e94b-4118-a02f-67d9dca72c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137af03e-9e9b-41ec-9384-c552e63f5876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0918fd02-e1e9-461d-8498-eaf0b01e57ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dbcea0-8e1e-4367-815f-2418faa85e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968356f9-7a8e-40a8-9b20-210a9747525c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98146ea9-fac2-467c-b87a-3bdbb499d284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced96528-0398-4a1b-b952-a5bd7bff3923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.186.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa4f22e-7891-448d-8629-c42c28a04457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.167.44.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd51187e-9711-4df1-aa8f-fa80295ad384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.26.252']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c2c33d-d03b-4ab5-91ed-185fcb07b5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d35ff46-dfc0-4e2a-9f72-d564744a5da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.104.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c90842-f377-46cf-9740-33d8a384632d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.120.62']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216028f5-86ef-4636-8449-086645cfba1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.244.12.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f229e8fb-46d8-4bf1-a9cc-e64695a0fa29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06cb74d-a732-424f-9cbb-e72bf0dcc2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.128.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4f0da3-41eb-4709-9e82-26271cbd8cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ffbea3-e743-46c3-8671-9fa6221971ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.105.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991c8104-6beb-407b-ac77-e5dcee95608f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.69.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b606f8-1194-4851-a396-2d79435a9e20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb16019-3b97-48f1-92dc-788d94ab634f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.243.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b6e544-5dfd-45c3-90a1-966fd6f6bd05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036efc87-5a6f-4887-9be5-f5a05fcdb6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b6f47c-dffb-46b7-a2da-e11033749214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8462980b-738a-4a8c-bd0b-0181f7f8e569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.14']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d468baf7-199d-48e7-98b2-dd60ccd72a38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d479d233-51a5-4f16-aeab-791c65c9a799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6dc90d-516a-4555-ba28-47cd031fd9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcbd718-7c59-4a76-b363-498eba1d23d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d7e12d-5c0e-4964-b03b-0181ff16ed22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ad493f-0dfb-4f43-9bc8-1545030b447f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8aa5db6-ef0a-448e-85a4-e7db7c93e50f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc44ce4-5c13-4f0f-8eca-b94fffa3bc11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c03022-f0b8-4f95-86e5-e303a5ca78dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1472b4f9-d6e0-4e83-997b-3b8b5a89e08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.59']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef60eeeb-bb77-4fc0-b490-e5c676af13ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49b7243d-7ac2-472a-9e9f-58889d26c82f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d9c683-5097-413f-9534-3e2f5442f613", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.137.67.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e8783e-0545-4033-8101-0c1779ba232c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.74.177.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d1a8f7-ccdc-41e3-aa37-2c486e0a7680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.75.93.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8358f9-3cb1-4659-90ed-b2f562945bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9554ca36-cef5-435a-80d4-a830d0206832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7adb865-664a-4589-a380-55dc239e9491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73efa91d-b914-44a9-bc93-b4e5e3d062f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510926e0-110f-402b-bb53-eaaab6a7fc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31a2705-170e-4f85-b582-d7fe378196bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a30c1d-556a-47d0-9c27-0c38ce6475ba", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa794e94-82e7-43df-afe0-2b688c7e4157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e70da3-8353-4279-a50a-954c9651930d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12de5b56-46c0-4e2a-be51-14b5f48d30c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9485c01-dd94-455e-9544-cd5f1ce4a045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498a19ce-9d05-4501-adb5-daa7826d06a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.118.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efefa5e0-f126-4a60-9221-26ff76046b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1e4716-b487-4687-8d36-b6d22b2fe1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072c5be5-a2dd-4561-a6df-3f1a9e2b703b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b81e86d-5554-4477-bbba-821ad55a990b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.66']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e75200c-20b6-4f0c-8130-5e63ed9b5708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa8d02b-1770-4786-9eaa-201a64bcefa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d4cca9-9494-4c74-9bcd-bb2ec2d872cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c611a23f-0f37-4d92-9bd7-3e23bf31b57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba2c3ea-5721-4615-a5a8-fbf1c07c3ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9379428-5328-4cc5-8a0c-b21a1cd395a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e51d65c-09da-407f-915e-5531c0adb7c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527953bd-301d-409d-9021-0bf1b88ab42f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc9ffe7-51c1-4682-bf98-e42d39b241be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4015a9e-ad47-4184-9a88-549c5d77b1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39be5322-8a69-48d5-ae45-caf2b5deda0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded8f80e-1c25-49c6-b8a9-db472bbd7082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ec761d-31cd-4fd9-9cdb-3181077980e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913f2d90-7be6-4def-8645-3cc1e7fc909f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d575ad-16df-4602-b696-f0426973e09b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.159.131.56']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12590732-c15c-4371-a856-6398f4560c48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.171.171.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e442cad7-8e31-4390-892b-36a550178946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.47.4.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac0d084-9dac-4b3d-8d60-72aeb9b90207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da24dc3e-ed11-4985-9e3f-5ba71a8944fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904a2f37-31c9-4da4-ad97-88a59e05d039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d9e48cbb-97ce-4e82-900b-20a1fba7f000", "relationship_type": "indicates", "source_ref": "indicator--904a2f37-31c9-4da4-ad97-88a59e05d039", "target_ref": "vulnerability--d3572596-05e0-4bbe-a5c2-7844e00d9a39", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe0c8cd-8798-45c5-a271-215da0c41a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513f13a9-05ae-45ed-9b04-0c642f35c169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ed9ecf-9924-461d-8bb5-82e6f8cc994a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3ada6a-4ed5-4430-9211-50eb8d740b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dad985-5253-422c-a01f-89aeb57395c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5de001-336a-4ae5-81de-d977b664e9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67935e49-7b7e-42b7-b33a-ed21b6a7d37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47476fa-4914-4263-aeb6-4b42c6d4dd83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824e1fc7-95ed-47fd-8cf4-22cc3dd0f426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd5ea94-fc4b-4443-a23e-5ce264ee10f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aac9e67-ecb8-4694-a5e9-d364fe723c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589fd068-1e6f-4504-bdbc-a42baf48c52d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab732dd6-1af2-4950-8935-31ae43c5ddd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34e42da-f818-45ee-a1eb-7aeaacba9afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef47fd54-e7f4-4105-85c9-566ad0e888be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.62.207.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531075bf-e223-458f-8afd-04b5662335c9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.129.29.97']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c1716c-bc5e-4b99-931c-5acb8e2e13d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.208.12.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92121848-3798-4e34-a76a-9245f4cd76ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.106.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a95cc0-40c7-4092-b307-23f7e7942276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.108.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea42a15-5d68-494e-90bc-0a3c41451a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.115.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8fd627c-bcd3-4282-b81c-17d7e05a85cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.215.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca826d0-085d-4abc-899f-480d7befa945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.233.112']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b76f5e-99c1-4088-833d-44f0ad83280e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc94b5f-ef3b-4162-b60a-f49616839a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d70a7f-d376-47c8-ac31-76a9b3e971b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.64.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97a372b1-06a2-4fb1-b3d1-ed3991964d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.78.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d2e837-a607-4591-ad25-129e4e80c2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.88.128']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d82cdd4-a95c-4fbe-9c20-cb6fba069ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.96.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3246561a-8711-426d-9e97-d0992aeac8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.0.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd871825-2baf-4208-a451-a07007b18f91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.148.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93288ee-5130-4992-b631-54833124e5c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09172abe-c36a-4ba7-b07f-5a44ffe81f23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.159.4']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934ed697-2f91-484b-96c7-cbf2c13ec31a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1460a385-3859-45ae-80b6-fcbd7a2b28d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.173.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72254a8c-ea43-4a1b-a480-d2a4017535ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.173.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e753bc6-4e37-47ca-922e-0942c1173473", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.33.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3909506-afde-4601-bd9b-b7166b679c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9752bc3-6649-4408-8a1f-ef10d176f111", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.134']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f66af1-07e5-4e61-b564-a13dbf2d5e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.42.24']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f68774-83a1-4ab2-a07d-fd46cc76f725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be37b40-d882-44ba-9c9a-c75d144c5fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0f97b4-5fdf-4ae2-bdbe-fb1574672d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72960811-4afd-47fa-991b-959f1eb27f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.45.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb6fb5a2-7536-4b03-88ee-d8a882f04380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c210376-3489-40e2-9952-3eba5a3c480e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b67f5f-2d0b-4929-8ff0-cdab79430580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.47.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbec00e-f5e7-434f-a544-0f80ffb50901", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.226.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb3af4f-78e9-4b1d-9e77-c383cc57fca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.1.47']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b17e85-280d-465b-a6fc-adc370ed05ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.138']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4521f10c-48a4-4103-b76e-65cab833d8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4b5bdd-0557-4952-9569-ae17ce8254e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.61']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef35023-12db-43f9-96cf-01c95cf4ddd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e806dfb6-a53b-414c-b941-b91309bc9170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed2a025-7630-4055-a831-e282053447cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3bf752-6f56-4532-8bb6-0d80c1e80fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adece69b-4a11-432d-8d87-1837a81bb618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.161']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dd66ff-decc-444d-a911-dbfd6e134e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349afa7f-c6ff-498e-b2d0-d59cb78acf05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce620de-a256-4f1b-adc1-fa2db7360e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee5729cc-1396-42fb-bb07-abce6e1f4627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca6583a-356c-40df-ab63-0d972146ed18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af102250-dc18-4bb9-9426-f13931adc1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac3e2a9-93ef-4ce3-865a-f6e837891efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25967133-6945-4f97-bb38-5bc1409ceda8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2450989-9e99-4324-8b31-ba0b990a3c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75a4eae-e05f-4846-bfd3-5467619dbe6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56734030-74a1-4ade-bfa0-c89a9395c103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240b6d2c-ebaa-41b5-944d-984ceb2f3735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e3ba18-dca2-4f5b-a514-d94040cedfcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f5957a-37d6-4332-9fb7-3d1c7e127630", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97df8379-6aa8-4d8c-aae8-211bf49e4833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8939e1b1-1a95-4ee7-b1f2-89512231a77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99566056-340e-4c45-a490-eca08a25cfd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.65.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd6fe94-6753-40dc-bb39-409ea702eb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee7abe9-90c0-4496-9687-8e2994823ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf38247c-62e7-4772-af33-c57303bb3b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6eb277-67ef-4657-b523-cc8479829146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785c35fe-8e79-4c9f-abcd-c76933ac90c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa2d5d5-cdcf-4c13-9b2a-954eba42a9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd37503c-4034-49fd-8015-139698f0414b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e29f11d0-ef23-4990-8b41-b73812b4897c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.246']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11718a5b-5e89-4630-8388-f789a09f7130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d10ea2c-93f5-4dad-a77f-1001974bf51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d428f57-a119-45c8-a651-4f303d8d102f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.104.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbce0ea-d699-4960-8566-f2d48f4fce72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.126.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f985cbd-1557-4cd5-97db-10764c819322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.237.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d39c233-a520-4e86-a76f-022478aaf342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.96.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2275f8-4881-41e0-b09c-95fd01fd6c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.188.255']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250f7859-7b03-4a47-87f2-e913dc8ed45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.225.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb4879b-de4c-42b9-bf42-58995c670189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.228.245.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d295853f-1c06-4a10-b17f-fc98bf386d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.117.130']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdfbea9-2ade-4379-b361-f441a25447ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.110.37.104']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3906214-eb47-4b99-8113-44993a9dc25c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.72.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57bb558-59ce-4e5c-9f77-03d15aac33c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75c8fd97-ff9b-485b-8a52-8b491954fcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde9e423-a0ff-4780-a78d-36e509bb6aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00a8bf5-2306-46ae-8355-e817cbc1cd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0980a36a-751b-4ea2-b46e-63f49c6de8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.228']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e75d66-4ab6-43b5-b7a2-36e8038f2b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--accc1633-82a8-4d3f-85f8-c751a27281c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8008ab90-7cfc-4b23-9f8e-27683f8e1bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c705f7e8-1805-4a99-aedb-50f9076fbc28", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcdb98f-e564-49da-be0c-2cdaaf4de3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff03d50-92b8-4e94-baef-4929476e9a75", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266010ba-15c6-4e69-8479-033377b5fb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76eb5cc9-2a9a-4616-aad8-7c4fa818e5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c66b713-5ce7-4881-9d99-126548b20c4b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44bbc21f-5aff-4699-8749-a96c0b7d836b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.184']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a400373e-afbc-42f5-b478-912314004b65", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39402e1e-cab9-4606-a4e4-d9a2089a7b7d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01dfd02f-1dc0-4733-9b7b-a1b07a569f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec66c89-b840-4560-95ae-42fd90badb06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af9a3f2-5f2f-4645-9404-420e03dff528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e181f97-3e4c-41d2-97ab-e231e5997f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58e6df5-b1e0-4725-bb53-98d1b4065c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b2028b-5559-4b3e-969d-96e3f43882a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.226']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e651993-23bf-4bc8-aaad-490da6ea6a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5efd47-1592-4831-b3a5-400eba5ff719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed79147b-fba0-4798-81b0-5d39f1cd9df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9364a3f8-c36e-4f29-a785-bf50d60b15ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.234']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcf7b9d-5ca8-41ec-82bd-04e5223e0242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6bc147-730d-4c09-ba62-f436f788cdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b274bb2-d0dd-4ca0-bb27-13850f7c0a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea10327b-b957-4ddb-89d4-d96b845379a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.238']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcad481f-ad77-42a3-8b76-1ce1f7de672d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.240']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb1cf19-d6d6-4d86-b7a5-9c938dbe41cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b9d2c22-b43c-4b77-911a-6b3667b8814e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f51be9-51b5-4947-9c9a-e7dd34c27ca2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0fab7d-c805-4030-8ceb-40963ac6a430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.254']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df39c27b-b478-4396-9a91-55b9202d1285", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.46.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7167df6d-6394-4c2f-bd20-42c089a7ea78", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.46.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--479c4cf9-7385-4a59-948b-1997cdfbaa87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.56.220.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a396e29-7424-498d-a2a4-826af649bfbc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.115.17.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a0749a-d641-4544-a789-59a5640eccd4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.151.251.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a358d0f-1c99-4a04-be6c-af2b38f73b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.217.209.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5cf7b7-abf4-4151-9f71-89fbba6d2a44", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.235.21.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68345459-2037-4b6e-9859-9aa923299b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.201.20.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b519dcd1-bed6-4da1-9491-2ea777bdd1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.22.62.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdcf79a-90ba-4e89-a1d9-31cd287ba3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.252.92.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e0eacd-5177-4a8d-93e7-231c1d89d955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.48.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6fdf6a-580c-4c9a-841b-0a6882df27b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.32.70.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e212e1-e208-4a4a-af38-ce28b9b2e5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--875d5624-8920-401b-b2aa-a1a0bcc9c332", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a762a0d-65e6-4dfd-8488-360b086d67b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f2ce7b-46c9-4f11-b59a-f3d2571a8911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8f9cd7-55d0-49ad-b9d5-8e0d8c2a12aa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.115.253.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb489d34-97de-4657-87c7-a606b8790795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.120.252.122']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b514af9e-6cd9-4983-bb6d-b270aa95fcf7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fda95a2-1670-4e7b-b753-7498310ab1a7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc0e6c9-786c-4f43-8d4d-651fca6bab15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2766fac1-93e7-4958-a6e0-4225f39dd72d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfbf23f-231e-470b-9680-6424a243273a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4259c0ab-4a52-4c6a-aa8f-17d687230653", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142e565a-2549-4cb9-aff3-37662084d1eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b285761-fa34-4c93-8336-334a74a8969f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5228f31-45f5-474c-8127-588874285705", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f866057e-11de-469b-bc7a-c179f90d3d24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321da151-f437-45c4-aa44-40d8ddd66b14", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e61e65f-81f4-41a4-ac3c-dd9fa71a05f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--757f15b6-c70e-40f1-affd-b0dbbfc1a66a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66a791c-ad8c-4c2f-90dc-562e407edd75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4930fa0c-7255-4bb7-ac19-b5402f67f575", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b873adb9-27d5-4055-91d5-d827ce2b4749", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe7f2575-e894-474e-9259-b6a98e743e20", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc308460-00dd-4361-9299-a0bb9e43f9a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366eefef-19dd-4a2a-bc5e-490786c23e9a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77de2e2-41d1-4588-8fda-0b667bbd8c29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5114c3-4c86-40f1-892d-94c6b09c20fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.20']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27e0eaa-3e5a-488a-b8c2-585275dbb087", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.22']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd0471b0-662b-4859-a77f-8a19cf14258c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe3794d-7ae4-4568-9fc3-eb7331c4073f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb7ddbc-00cb-4f5f-8954-550a7b9a1ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.181.244']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa00612-010b-405a-bf61-94be80b49e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58e134f-a816-4ef6-bae5-cd7409511229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1191e76f-3d9f-47d8-a1f3-3c765b33d746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20300759-b159-461c-ab8c-16da6a39d739", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7243bfd-3203-4972-80cc-d3a502d4d11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c6c3d96-5bab-43b4-ac4c-bfd8f7e32f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.18']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ef60c2-7a26-4c96-81fa-f280cfe0416d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806a0057-c252-4c5c-90bb-f231a44c3c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.28']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5caa5467-27b6-4d73-8226-16ac27d6a2f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4abdb75-9ad5-46bf-aec0-f74df480153b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032cbbfd-e94b-4e32-bc6e-c124aaf8d144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee4e85b-7e8a-4bcd-ba02-2039c6a8b248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.45']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0bf4ea-f527-4b2e-bf8a-05f975444efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.50']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07088727-d898-4640-9beb-6f302be4d0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b85fb5-2ea1-4ee7-94d2-9a26f7c12922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--771cbd4a-0265-4d8c-b730-f9a7befcd437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64b1b66-219d-4d13-a60a-fe717c255647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.41']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f51e134-3e6c-4607-9b8d-4b368547a393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.90.246.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4721663-e769-4337-bf2a-a7602de33138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.95.182.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa16f4e-0fc2-4b9e-9cf6-bc55d95ce152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.96.78.232']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67230275-1866-423a-98be-f9cd22b72d1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.176.100']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3eed98-815a-43a9-abd3-b29b56e0f3a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.163']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62719433-4952-47e7-aeea-96131e6f2dad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.111.187.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7290b522-2b75-49e0-8c76-1b471da82c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.16.8.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55175b9f-2db1-4c6e-b47e-c1650946c30f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.24.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd450ff-d369-40a4-8f64-5800f6cf0402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251b9b48-584f-4d9a-846b-fb3d518d6c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203a9a92-96f7-496a-9f0b-08faed32e53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a79954-62de-4221-8895-b845459c25e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c55e48-b520-4238-a4e4-856e8aaf5a03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63be681c-e3c3-4d5f-9404-52b1a2c82d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.189.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c4f71d-6605-4d17-abb4-9fc4f5793100", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.35.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a89577e-3c87-495b-b5df-186d6c0a81d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.84.167']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8076c582-d5d8-424c-a586-8be35abf512e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.196.16.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1a0051-eda5-4a10-9f7a-14acdfd438de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09719072-8d6a-4567-a3bc-1205410072f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.49']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c0580e-1325-46da-bf1e-9ad4304fed12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee04d44-9c5c-4456-a8b9-21b205ced0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4f760a-62b2-480b-a2c1-78a522025f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f82131-775c-40c6-86bb-67367ec66928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5279207-9d52-4550-be4d-f5f2e1735647", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.204.252.26']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f658523-a85f-4439-aba0-72620352d10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381ef34a-0cff-457c-a4a8-ec2f58dd41fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd84185-3f34-43d9-9c61-34a2117bf4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d23ce6f-83fc-4e1f-b9df-0d240002fa2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.166.198']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6edd09b-2f44-44d0-8be9-d78010242200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.145.38']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51216920-d7ea-4c3a-8446-57ac3051ef56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.169.108.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc9b231-ef00-433d-ab72-2a196ea5ec14", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.70']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab3582b-0e99-4ce3-904a-33c649fab70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3da77b-8f4d-48e8-8c49-66b90b43563f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de572c48-07cc-4c46-b1c7-8d5c529aaf71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c18ff4f-a7a5-40fd-8b49-bf35bb1da859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa2e037-cd53-4ab9-a7e3-5341f1a3e6ab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.36.231.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f78c412c-ea8c-49a3-ab7b-cf84348c3372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.117.103']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17a7fd4-29bb-4168-87f2-49b17109c2e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.117.16']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a740c75-fd6b-4be5-8a16-469a34c0e741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9615661-da76-4e9c-8583-a004fa111e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f421a7e9-6aa5-4879-96e1-438f2d75a91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ed07e6-7d98-4da7-856a-e8738241fa22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.148']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdc53a6-980e-4ea1-afd2-504dbd73396a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0f203b-8de9-40b4-912e-5fc25434c95a", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04aea7c-58d6-48d3-bec0-732f6b5fb9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9c22ea-5d56-4474-b331-0edbc439ded0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.152']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca85eec-d1b5-4913-8990-ae42df6853fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.154']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731e502a-cfeb-46ca-884e-07b2a7c63ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf87ccb9-b745-45ec-96c0-03fda5201027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.156']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9621c42-3588-4f2d-bee5-70d55eba2e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d34cd3-0690-47a7-8eda-44e534ce2c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.38.96.216']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb65876-f9ef-44b9-a971-661dee6b2a0f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.39.246.58']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fad3b92-0201-4a46-93c9-1a495c5771dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.12.110']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab20842-b01e-4ae6-91bc-af43fc55c4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.12.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afc251e-b16b-46ea-87b8-4388878c8c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.13.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5272afe6-9b58-43c1-a92c-c6cee6020777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.10.188']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9dafc9-2086-4ee8-bd8b-110513c46927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.8.54']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e1180e-a0be-484d-9b84-cc88d2322b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.198.176.224']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--371df960-a12b-4faa-af8c-80029b6009c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.108.25.8']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805ef5ab-2bcc-4e64-b24d-56786d654ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9725668f-4ba7-4e3b-b139-651a68521845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d406d6f2-a09c-4670-861e-853e3c49eecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c76584-b838-46cb-bc7c-a258b11f77f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fede765e-4827-413d-9d97-d015afdbb182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b3180d-2c04-4f0f-be6a-d64ba925a18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd5412d-3304-42c0-8f33-89a48c0030e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e70279f-33a9-4ea7-b7ea-00235ad9537c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb99bce-2b6c-4c95-b4ff-495e920bb7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ec1559-a4b2-4e4b-b222-d38ee6d50857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7253ca02-13cc-4130-9e48-e2553824d827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b2c8f3-1656-46e5-9ba9-0740e5746f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.177']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4a7711-cd11-4f4c-8fd2-b50af491f760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.179']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f427936c-de63-414d-8efb-9f0a69f7b236", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.181']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ab8a95-022d-4a6c-a7a9-beac073be21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.183']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a04135-5174-4ca8-bdf3-7d80dea24ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9d3d15-7f36-4ce3-a011-e8fdab157a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1440a088-3594-4033-b16d-082dc8e1e99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf62181-6ebd-435a-91c6-b156207dbcc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d073a8-27b5-4ff8-a5d9-8e445c9c6c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0fb965-5543-4049-a988-f23d2f56a48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7360fbaa-1263-4f07-8f76-901a960a9fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d22ee3b-0200-456b-9eba-1dabbe89c999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3046d8-8098-48d5-9d7c-48051443a153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.217']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6170a0c5-8915-44df-a2d8-dcb6119b3e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.219']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8566064-9034-405b-adf3-0c0d179a33d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.221']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f992abca-bdea-46d8-b25d-4e629558b5c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2521111f-b1ba-4172-b7c5-271753073712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.33']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8976320-0201-435e-9fa6-acc07fe1de76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.35']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613e0fec-3a0c-4330-9a5f-10c0d0f55eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.37']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bab73ec-c9d7-43f0-8df6-a6fc2c09a1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.39']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6c05ac-9e5a-4b3b-a5f8-9dc5c2cd8bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c32e90-bd2f-484c-bee5-7c90c3c94262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee3b802-e643-43bb-af96-cc5fe5faff23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d5a466-1ad3-4d48-b3cb-3a04dcc353a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.197.64']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd4ae09-e9d8-4bb8-b6f7-12929cd9e5d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47da40e-f140-4a69-83d2-78ab8211ff33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.32']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a95e62c-4126-42bc-a94f-4ddfae0b18d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d91f877-f19c-4d95-962e-a86c958828a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0fe3faa-3a5c-4f5f-822a-af06f49a4cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4ad1c5-a22e-4c83-85de-263685073016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.123']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed225f37-5ad7-4769-a7ff-3023c17474e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.125']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7042c5be-b6cd-437c-80dc-07ad5ed93d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.127']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d66576-3722-4aa7-8d4f-2935ef791137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b74f37-f9e5-46c1-9f95-e2a605db769e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce6e7bc-f3d3-48ea-9303-904c17f445ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60fb0b51-2239-4965-b33a-f6387dec4e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c17339-a7fa-41f7-b4f9-1e056eaea6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0221d500-a689-44a5-a132-056a8d9860fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943551a1-64a8-41b6-a04e-1556879d1287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4af149-d870-4caa-b893-ea3ed1843fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac221dea-088c-4ee6-8563-7fff16f6f1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e37a363-1f41-45ff-8bda-e2d7a1f49229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7573e8e2-4d2b-4c7c-aa88-9a936bd9b7cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc577e1-0c2d-440d-b429-4bf1ca49e7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23ce8ce2-5d5b-4e32-9725-331e8beba5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44321c25-f7cf-4c97-9439-d2865d385339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16995a0-8bbd-4529-8298-965b8bc2bced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.185']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cd5441-d30e-4b0b-aa0c-8377b59a09be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.187']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc649c2-7568-46cf-b8b5-718bae091720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.189']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07efb429-159c-4a1f-b276-976247befecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.19']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee594681-f573-4e51-82a2-4779e4aa90cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.191']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10840ecb-f861-4f71-8e87-2efd1f1ce7f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f007660-44a9-4d4d-87f3-f02982a310b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.21']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8669e821-2f04-4d72-b4ec-d980e27a69e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c585fd66-8c8c-483b-afcc-42bcee19a118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8074b340-c062-4347-bf18-91f00a53a9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--665e2ce7-c2a1-4f38-b3b1-0e09e77eccf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.23']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35fbdb5-caa9-4b2c-ad2d-f67db782c3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f50e16-8fff-44db-b519-57168ecf932b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fec85d2-c5f8-4912-af8e-787f0bfad98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc731dd-e9a1-431e-8aab-4dcf9db27244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86dbcdc3-d4e3-4cef-8585-2d6e8a32c3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a32da49-5f64-49ee-9905-cb11ed629725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.25']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84e167f-9559-4095-8cf2-e86940fcd4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0db58d-063f-4796-99a9-371ec317228e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22218312-b06d-47a6-8c22-ecc1a07094c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.255']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593df271-ded5-43c0-914d-fca7edf6ec38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.27']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41509f93-98a0-42d6-9e7c-c7cddc021d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.29']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8e3d75-5b29-4d0a-be92-87ee423a7a82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239ef06c-c3fd-4fa3-886c-ce2a2d4563e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6332327b-2562-49b8-a9d4-9669470de11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e399225b-ea26-407f-adef-d26aabaa648e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb956f9-e205-4fdf-9fb0-93dd8b3ce5a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36681e9d-a4c2-4e87-8cd1-c966ee0dfb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.89']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26a8a87-f08f-403f-b551-7a4f6be01fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b326f2f8-0241-4e3e-9b4b-0ebb28a3d5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.91']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b208babf-71c9-4d3d-a7fe-cc0faf31fbc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.93']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d50d2d-8ab1-4de3-ab62-1c766f1f3921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2af0a2-4050-486e-9739-1b63212cca93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.95']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb467db-75cd-4f9a-bd12-56d7fd9c5e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.1']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74c5f8c-4a30-4042-90c5-77923746a7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.105']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fb7d2ee-4c97-4508-8c55-cb54f3b7f262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.107']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5f58e2-2572-4ab6-9f39-a7e9804663a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.109']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8a587a-ba59-42d5-8217-88d9c434403b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.11']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c417e722-f908-44cd-9c7c-711591ddd9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.111']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66851425-3a17-4f00-9c5d-40a6806c86bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.113']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f233ef6f-49c9-4ba5-932b-5197c9b9400f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.115']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d269a5f-1ca7-4d61-9ed1-011dd5f016b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.117']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54bc1da-3312-4a26-a635-717ebd7a0604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.119']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbcb4a4-fcda-4645-a18d-821f0f13b10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04242e1-7785-4730-95b6-3423b99a5501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.13']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4aa1790-10b9-45ce-b86f-cdfdf2f9a5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7116ec11-948e-4036-bfb9-19b96bd98917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.133']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78383ec5-51c4-4a40-81e2-536421a7412d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.135']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ec6c60-d528-4449-b14a-a1929c3e0fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.137']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e264d7-1750-4c81-88b5-0fa0d3933811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.139']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d90583-d859-4d9e-908e-cbdfda124249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.141']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c231de-5640-4661-884a-558e7baca876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.143']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b3e165-af1c-4d4a-bf1f-5b7a979a16d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.145']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705ddc71-34b2-447e-a563-16c066970de8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.147']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb74a20-f89a-47bc-adfb-044624f88fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.149']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ae6b14-ffee-4525-9634-b478be562ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.15']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e78443-dd7d-4bc2-9e37-4332cb665ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.151']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c51adb5-ab3c-4abc-80c7-fc0b74f456b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b711773d-cd88-4448-82b2-d31fcd9d07c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e10f6d9b-7d00-42e0-9bf0-1c74592d834e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e803a832-7935-4208-b243-344678e52e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee88a91-ac5d-4e94-ab1e-f3ac1dd522ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.169']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abc486b-2325-4285-a578-ab299be488ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bf3a29-5004-4355-a2a2-10c19e15952b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.173']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5567cc-c2c1-4548-b87a-02505f1960bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47485d1-331b-41aa-8f68-fe0456fa73d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6a56eb-2620-43fd-8a1c-a16a9f640968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b038b809-fc92-4fe3-86f3-b3abaa71dd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.201']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5416378-709a-41b2-a623-057adf5f76e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.203']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64e91ee-8cb9-4c04-a29a-e5f802185ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.205']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1b48af-6af3-4a52-8a02-5e3663664a4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db7143c-421d-4ae0-9742-6916f118a1f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.209']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9144d502-c678-445e-9838-4a7de7332ace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.211']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4237d58e-d1ff-4995-bb36-7dd8f6a86967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427432f6-f0e1-40a7-9bb2-abe44b6136c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.215']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--043cae32-ae49-44cf-8737-7c62fc8a0cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6dcf390-2a84-48f6-85d5-d7dd2f7144fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.225']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c566d64b-4e7f-4bef-b1a8-248ae14de081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.227']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330759af-d008-41c1-b055-cae29b608008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.229']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--125d1989-f9d0-4721-8f76-21b0fb8c6633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.231']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f08218-a89f-462a-9e8f-5bc2d4c443e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c413ea72-5104-481f-b7bf-590de5ef8df7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.235']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b94e71-c495-49e4-a648-5de372f9ca9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.237']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531070e8-c251-4674-a35a-63d04840a2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.239']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40524cc0-dbb0-46c8-821d-63b3bbd53850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.241']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f86d0be-2d29-4c92-b7a6-6deddf85cd37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.243']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21477f7f-a094-46b7-b4d3-0aa8d3904f80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.245']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3af5773-46ec-4adc-bb34-95fb07e2662a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.247']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c0ffb6-5d0b-44d6-9623-5d5235d95d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630893fa-9c43-4312-9b21-39fd59646316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8cb9bbb-f7c8-40a9-9de2-484149849703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a2b12b-b5d6-45c6-9a2b-b4509f8e4c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0660e77-93e1-47d3-8c99-05a408ac3cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.3']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987fcd9f-e05a-41d1-b77d-c44916f4a62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e70dd14-ac5c-4718-8f00-16a388298ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea9b149b-52f2-4c8a-ab80-b351548f5695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f370349-d887-458e-8503-c97ce5fa878d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.67']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d600970d-1569-43de-8f97-da47b4d2744e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73141a30-9dbd-4d68-b3b7-530131b4710f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.7']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76515402-d676-4390-8f20-b7e453ea8f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56a91d39-8524-429c-aac8-f2959860c8bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.73']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3137624-3963-48f0-b496-39563e150965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.75']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f535feef-717a-41db-9761-39f27db767bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983d159d-56ac-4e7a-8f96-be7f1314e56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.79']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--407a4272-d96a-433b-b183-1869e0a353bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.81']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4ab68c-da27-499d-87e9-8b4b975ef7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.83']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3fba77-13d5-444b-8cd0-048afc48a106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.85']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9253eb12-6917-465b-9fea-c5d8884536e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.87']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227e73fd-23fa-400c-99c5-f1fd33e34a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.9']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9349e6b9-f2fe-43cb-98d5-1d7a16ec7004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.233.116.94']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afee4be6-b7ad-4456-b956-d575a4b302e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.240.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf8f9df-48f6-484b-baa9-aa0a1e0aa9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.88']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef39a1b-9dbb-4e3c-be5d-eccce0c9d784", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.135.77']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04279856-949d-42ea-b69f-b065826f8398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.151.17']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2523a920-817f-4e6a-98b8-06f37cb52856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.99.117.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a8c1a1-84e6-489f-9603-8d92d82c66ac", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4c5e59-0b59-40f7-98aa-6c4cc49c0560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3002b121-9946-4b96-a584-04e428cbab85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283921ff-7e76-4c69-a8e1-ab6f0589229f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.180']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dbc76c-6d8f-4258-b378-cc18c865b641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824f5d24-fe8e-4b1c-b0bd-a735e22c3bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db861fa6-a7d7-4e28-8bee-a4bc4102a0d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ce0c78-e313-4f88-88da-f7dfb7bf31ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.155']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92899c7-3a31-4fb3-af3f-03179f6790c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d67968-14a9-4b34-a0ca-f09c6f365333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.229.64.108']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf8fe16-d865-4651-bf75-6c3ca9416b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1304413c-d275-4c7e-ac31-7ef701c0aca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8481f543-d342-4d4c-9091-8a67e0a10e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.13.86']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7374df2f-6d23-4d15-9f20-5f6e6cfcdb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.249.230.136']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d667d0-abcc-4622-bd68-d179a33dd0d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.30']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d70599-1648-4c0e-94c6-e4f11bdd5ffb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.90']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca02bf60-ac98-4f76-b3ec-91f946fa4be0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.55']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78c6573-595c-4272-bfc1-3d382c2c78d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.43.132.102']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63be3ccc-ddc1-47fc-9930-17a3f671085e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.130.170.146']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8291e54a-f7a0-43d7-9771-6f1c6b9cc7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.182.82.132']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcb764f-131e-40bb-a93e-8bb31a2c6e3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.52.233']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5126a1c-b4e4-4381-af8e-c1d9db83e407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b9c291-64a9-4759-8253-93890c239d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.47.246.223']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53613fdb-a78f-4922-bc0d-4e1617ffa57c", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.70.197.153']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbae649c-0a6b-4f94-9507-4d859a36e011", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.245.51']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3de14e92-69d3-4196-9b6f-4a699b2ad3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.87.231.131']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6784bf2a-69be-46f3-a9ef-142c6ec9dce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.152.236']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a7348d-9f90-4b09-9aa0-0f089084732d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.172.218']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1875b5-34ac-4aa2-8149-4c8d975f018a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.78.175.36']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5ea6f8-a497-4640-8a70-e15c12e97199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518e7c37-53d4-4475-9edf-81408985fbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.134.31']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb16f90b-e46d-46d5-9abf-c8bbed20df44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c91b3a-eaf7-4503-b975-eee09ae1b4a7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.93.43.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2c56d0-591a-4c8a-ad97-71788151733f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.80.74.129']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac74a6b-3a1a-41b4-a0bc-a50d5cf30c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.88.251.176']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d808e745-d7ea-4b4b-84ec-b67c668822b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.53.157']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80609aa8-86dc-46ff-b093-607c823e7778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.255.169.207']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7294c77e-4e3f-4840-8da9-5ddbc7e9ef5d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<!doctype']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ff29cb-a01d-4b83-a468-a751522074ee", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</body>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d854d27-868d-4214-b566-dc7db4e91211", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</head>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e61daf4-fbce-4d3d-bf6b-517abb77be05", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '</html>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174a359c-e79e-4f19-9dd9-46e7de755308", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<body>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27318a13-895e-4b88-8cee-d2ddac8a8216", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<head>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba19091-0c71-48fb-80ed-cec4e700d8e9", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<html']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75acd96f-0573-47ae-93b4-69118a3e6937", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<link']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821f906d-5511-43b6-aa51-6678bc087ccd", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<meta']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e18904-e533-4188-b62f-e1ae122b8aba", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<openclaw-app></openclaw-app>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf256f6-1f4d-406f-9fe3-a704229588c0", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<script']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b034363f-01f1-424b-93a1-ab210956956d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '<title>OpenClaw']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fbe1fc-5e28-477a-8733-8d8c5f010dc0", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'Control</title>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff791626-5a83-497d-8538-3f67a87b3687", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'charset=\"UTF-8\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24f06b6-842b-483f-8c3a-cca6f03790f5", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'content=\"dark']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b99b4c3-158c-4724-8590-c672edd69525", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'content=\"width=device-width,']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b6384e-408f-4de2-bb8c-9f4307daf627", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'crossorigin']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8c9bab-5a9d-4eec-bb93-6ff9a0d78425", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./apple-touch-icon.png\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac5990e-4d88-4185-b168-2fab56591c5c", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/format-DeRVtGzv.js\">']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e211e173-c1cf-4642-9850-b87b2f78cb4e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/index-DmrclaY-.css\">']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e4a60f-6f44-4504-812a-521ad3dd77fa", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./assets/lit-BZwq2xLD.js\">']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--309c90cc-48ba-4d14-865a-3d60f976b870", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./favicon-32.png\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--620787a7-995f-4770-bd95-2797a7c587ef", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'href=\"./favicon.svg\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21d4183-4cd5-428e-94a6-0fcf28574702", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'html>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5408423d-cf5c-4462-9722-8f99bf16b442", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'initial-scale=1.0\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9e827d-606e-4294-b551-13eda2ac49dc", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'lang=\"en\">']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cf9c36-1d8d-4341-adb9-0b8374136c2e", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'light\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333b0d01-693a-4cb6-8a8d-8b45ac15f8e8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'name=\"color-scheme\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be60c5e5-6f6b-4d43-9796-f303f5f64a24", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'name=\"viewport\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f9a911-3b9d-49a8-9efe-9195cc34cd2b", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"apple-touch-icon\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e055d8-0c10-4813-835f-3040e07d8672", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"icon\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33baf58-0679-42dd-bdbe-232ef342cc28", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"modulepreload\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61699682-7c51-4681-b1c7-75703b3698b4", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'rel=\"stylesheet\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207ea2c6-5c12-4dbb-8e7b-badc6c30b67f", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'sizes=\"180x180\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f77b377-2613-465d-aa77-4551f6acadc8", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'sizes=\"32x32\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6234fbd3-1225-42be-bf9c-d0e2d72705ab", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'src=\"./assets/index-UvgeZ3yV.js\"></script>']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9205a2e-62b7-4d1e-928c-95649f0e8980", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"image/png\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84f0cf1-5de9-4306-9160-5660e420515d", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"image/svg+xml\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93d9111-deea-453e-b8dd-3eba67703f85", "name": "Malicious Host", "description": "Observed: FTP, GIT, MSSQL, MYSQL, NTP, PORTSCAN, REDIS, SIP, SNMP, TELNET, WEB activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = 'type=\"module\"']", "pattern_type": "stix", "valid_from": "2026-05-29T00:00:00.000Z", "valid_until": "2026-06-28T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-29-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ftp", "protocol:git", "protocol:mssql", "protocol:mysql", "protocol:ntp", "protocol:portscan", "protocol:redis", "protocol:sip", "protocol:snmp", "protocol:telnet", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc0eeb5-2944-4d3a-ac51-6781ae2a2c28", "sighting_of_ref": "indicator--5d7d0ca0-71e0-49ba-9d27-5b34dada1a37", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbea0132-2d65-4841-bdd8-dda3f0aa78fa", "sighting_of_ref": "indicator--693cc838-26e8-463b-af45-411ef79686bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2983f15-66df-4945-b37f-8ceec7a4e17b", "sighting_of_ref": "indicator--33d6f73b-f2f9-40e7-8e2c-15c45cab95b8", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f8d814-a3a6-4379-84ea-e4aaad8a8753", "sighting_of_ref": "indicator--a8ea82bc-0de7-48b7-b6f7-728e9da78f8a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fac8fb3-3dec-40cd-b04a-d0f3757e276e", "sighting_of_ref": "indicator--a5bb1142-ed07-4e66-b87a-bee9c35a06ea", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb93433f-b97a-4c59-bca8-bb6cd4e13f08", "sighting_of_ref": "indicator--e14cd6e0-1f1b-4204-9e84-7d5d60ddb269", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42242db3-f01b-43eb-b58f-8fae13ab993a", "sighting_of_ref": "indicator--05f8b09f-1fdf-478f-b7ef-ef06b7ca6d19", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c4ea24a-9eeb-4fa2-993f-504a9a8fbe35", "sighting_of_ref": "indicator--fdc3a98f-71df-400c-946c-918bc12c695b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8746e7eb-93df-42d1-b0df-491779ea19e9", "sighting_of_ref": "indicator--ca71917d-c190-4306-b567-bb37a42bd55c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937b5bb3-ded2-4272-bce0-e1af3b96edd9", "sighting_of_ref": "indicator--9732be67-d0c3-49b4-9b64-647172d5588a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628488f1-0023-4d07-94e7-368751ed4890", "sighting_of_ref": "indicator--5efd38bf-b7e2-4b03-8c2a-859f3e659582", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900aebde-40ad-45f5-8366-8d078db437e2", "sighting_of_ref": "indicator--4b7030b7-399a-42ef-ba8d-ba4ca00b32b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72f8a74-1f4c-41e8-9c32-bff04d4e4019", "sighting_of_ref": "indicator--46c3cc9a-1e86-448a-bf55-b7ac0287ac81", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3019b1b6-27b8-4bb5-843e-6a9818df216c", "sighting_of_ref": "indicator--4b02ce46-160c-47e1-ace9-0c681099a0b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a94050-4190-4d0c-a714-ec1a9d0cd997", "sighting_of_ref": "indicator--1c3e6aeb-7fe3-4f1c-ab19-fc82cf3b2bfd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca77f9f-2223-4ab7-b89e-9f8d1f2bcbc5", "sighting_of_ref": "indicator--a9638485-b5bb-4105-8b5d-04123d65cf6c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2233b277-0017-4176-bed9-dd38417231ac", "sighting_of_ref": "indicator--291dab88-4004-4028-b19c-5f29d846ab90", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241785c9-3091-427c-854d-2e07a3ca9ea0", "sighting_of_ref": "indicator--7f79d070-da56-46f1-b0b4-6000c97a1047", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5412aaf-0194-4516-962d-034ab9db9429", "sighting_of_ref": "indicator--bd8a44e2-7333-442f-b481-642cda9da983", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea102748-400b-4af0-a7f0-bb63ef092611", "sighting_of_ref": "indicator--1e4a8302-9f46-432a-a978-e63c4b6d0d7d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f3b9772-882b-4e52-ba3a-5b56a2af4af8", "sighting_of_ref": "indicator--1e131b0f-eb79-4da6-91ee-ec4e950ff200", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddc01a1-e3a3-4b27-97a6-44acb179c659", "sighting_of_ref": "indicator--52f60326-7009-4f2a-ba1c-ac0ad17a791b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c64f0a-4a71-4b46-af18-ff0b701379ef", "sighting_of_ref": "indicator--3031ee3c-5bf8-49e0-87f2-090a1def00ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607b8427-b283-42ac-bb9c-48c0dc94852c", "sighting_of_ref": "indicator--58cf25bb-bb49-41a9-b4df-b21652416bcf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3365cdf-c4f8-4b7d-ba61-bee9a9da208e", "sighting_of_ref": "indicator--b56428b8-4101-4a4a-a059-0abab4b6346e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef6857a-6487-40f3-8d87-1208b0d2e3c1", "sighting_of_ref": "indicator--b1efa1a0-628f-4fad-aef2-835c2fbca333", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cfa85e-962a-4104-8319-8f1aacfebd9b", "sighting_of_ref": "indicator--cb10fd53-0ad6-4b3a-92bc-2e608099b794", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb00c1d-d0e8-4b09-98de-6f2d735aae35", "sighting_of_ref": "indicator--d4f70d30-189e-4b56-806d-8a783e52ba48", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e83d2e-62cf-4437-b1bc-6196078c34da", "sighting_of_ref": "indicator--07890938-9c5b-4d61-bba5-338c37c1bae1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf7e53c-e8e4-4469-b417-ab04455a691e", "sighting_of_ref": "indicator--e1b4f824-1d75-42a2-9183-f11713c02aa8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b81d7c-0a16-4d67-b383-41646e0e4833", "sighting_of_ref": "indicator--9956a581-f1a5-4bfa-9871-324eb588a704", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e787b2d6-03ef-41ab-abee-3122f07fcb98", "sighting_of_ref": "indicator--2f7bd323-e847-4c46-b7fa-22e25c224fe8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce244d0a-c736-4556-bcf4-ef9b8342933c", "sighting_of_ref": "indicator--d47a97e7-c50e-4cf8-afa5-512518951e8c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f792b1d6-2558-474b-bcad-1ce32c909645", "sighting_of_ref": "indicator--37ff0555-1b5c-4d8c-9f4c-c1873bb6307f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04fd785-2d82-4ae4-aabf-91ceb59d78f9", "sighting_of_ref": "indicator--a516662d-e649-4bd4-b3d6-831407b32727", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cb303c-a110-446d-b6f3-1b7af9731155", "sighting_of_ref": "indicator--40d0d309-a20e-40e7-8e8d-61a7fe189c17", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c67c7eb-b1cc-4af4-8f8a-e16b1a4cab2e", "sighting_of_ref": "indicator--e918b40c-9895-4394-aa16-22eddf82198b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146d8112-a8ac-4002-b448-2bdf250e7b32", "sighting_of_ref": "indicator--a00fcedc-363e-464f-b021-805025000586", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e82568-8d9e-4d75-b262-7345f3f899fe", "sighting_of_ref": "indicator--5a668775-745c-4f0b-a9a9-37476a692a43", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c55728f-9422-40b3-839a-2c36bf93366b", "sighting_of_ref": "indicator--5cafe550-1e1d-4d79-897e-88ec7badb99a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fca2e49-1005-4a74-8b1e-2c1f623c4357", "sighting_of_ref": "indicator--79b81c0e-601c-440e-87f3-bd7e2dcb9395", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe240ce-fb7c-4fec-a6b0-d92d8407363c", "sighting_of_ref": "indicator--7bbcecb8-efb0-4d39-b9c3-16e3fc98c8c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc0973e-eeae-4e9f-a2c6-91affe3e057f", "sighting_of_ref": "indicator--a9bcf91d-f141-47ee-8472-b19b77d0d734", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eda548d-55a4-47d1-a6de-56904f68a5d5", "sighting_of_ref": "indicator--e45971cc-f1f9-4b4c-84ff-ff342b6a94fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d30ca4a-11bc-4da9-8e6d-42fdf63273e9", "sighting_of_ref": "indicator--6364d92e-9648-4765-b6ac-93f8e7886cdd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c52f9e9-858c-42a9-8fce-871db701e043", "sighting_of_ref": "indicator--1e8da6a4-357e-483d-b8af-93efc8271bb2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0252dc3c-4f28-4580-9960-7d04b00a3baf", "sighting_of_ref": "indicator--0ec113ab-c3e6-45d5-9f8d-f5f3d1f077de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f00938a-1a80-4779-a2d3-50b539e262da", "sighting_of_ref": "indicator--348edccf-cd91-4a15-91ed-727f73934e1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f15f6f0-0f97-4188-97a5-5dfd3ac3cc16", "sighting_of_ref": "indicator--0747ae79-a3fc-4e13-8a12-5c6b5cac873c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac636f1b-ae0b-4fe3-bbe6-3987f4ce6e5d", "sighting_of_ref": "indicator--6d55356a-c7dd-46d6-b17c-8c2fa2b9e8d7", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69de0fd-98c2-404e-84f3-3a0f9846b07a", "sighting_of_ref": "indicator--c32a7b5b-d17f-4ed1-bf6e-6b89d8758d25", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872d356b-2c19-4c04-8579-dbce79285ef3", "sighting_of_ref": "indicator--27678fbd-c767-45ea-b476-12da18c18985", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63b2e3d-c609-4f57-8e74-29d60a1e2901", "sighting_of_ref": "indicator--6fb818b8-8b8d-4caf-af06-404e8c66736c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5dd1a9-df61-4050-96a7-cff6979f5a7a", "sighting_of_ref": "indicator--7eaa87a7-1f4c-4e79-9ab8-397be844acc5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cba841-6de1-401b-a2c2-5b97d5b4ce07", "sighting_of_ref": "indicator--b38c6e3a-cfa9-466f-a2af-33964d747143", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b829ba-5193-4b13-94fe-d825ed308964", "sighting_of_ref": "indicator--d926c4be-9045-44f9-acf9-59e0a21aed1e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0054ba4-28f6-4a3c-a9d4-2b534dc34a78", "sighting_of_ref": "indicator--b86e77b0-8e50-4573-b915-3a546500bc3d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8dd6b18-ff5a-4ef0-ad83-b6153fb0b7c1", "sighting_of_ref": "indicator--8001c904-650b-4715-9261-d6340e66fce3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ffe2b70-04e4-44a1-834e-29d2d2879ac1", "sighting_of_ref": "indicator--520e8c22-1ecc-47b0-9332-ab5977532ea4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0283b2d0-9e00-4ce0-a772-a2f363bc82b6", "sighting_of_ref": "indicator--4dea08ea-2ab2-4164-9496-05a27f2e2c4a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a762f1d-267b-465a-b38b-6075f7773aed", "sighting_of_ref": "indicator--9228558a-4352-4606-ad58-500eb273b53b", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1e3fe5-bf93-40d3-98b3-953b7240f247", "sighting_of_ref": "indicator--c3906edf-e207-477d-b53f-b4d68846fbef", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a3a952-c18c-4cf9-a03e-efba7cd30b1f", "sighting_of_ref": "indicator--65d097f7-d31e-4809-a3bc-3b1f2c226d26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7b7271f-22c2-4afd-8714-4d0d362cf52c", "sighting_of_ref": "indicator--5d24524f-3958-4c8c-98ef-b93d5d7f0c82", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995581f0-4a81-4d75-b2e0-fed921e03f79", "sighting_of_ref": "indicator--a8954812-1e8b-4475-9663-6523604aecd3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db30083f-d84c-4def-b249-0357ff71b9f4", "sighting_of_ref": "indicator--feee91b4-e48b-4a8a-8726-f55987ea104b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b1a781-9e78-4c5e-b461-77698a18cdc7", "sighting_of_ref": "indicator--7e0ec60c-e5fc-4fce-b1b7-f5d39f1a3142", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1dadef-41ce-428a-ba12-965c001636ee", "sighting_of_ref": "indicator--531b777c-1dc0-46e7-9525-c0c04a52ce63", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fa4084-f539-4d74-ba3d-17cb2e561635", "sighting_of_ref": "indicator--3ac7b67a-9244-4d37-aaf4-8ad08573a560", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314fe074-667e-4dc2-bb20-f3baa3911859", "sighting_of_ref": "indicator--6fb32fe2-fa8b-464a-9895-d0fdb4b72874", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b49a872-b59a-496e-a2bd-5e7f14911e8d", "sighting_of_ref": "indicator--8ae51bc4-e2cd-45ce-8b74-30d70d6644ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a987809f-b9fd-46e2-97a8-087a06d15d3d", "sighting_of_ref": "indicator--9c30a2c0-2023-4e6d-b364-931b30798123", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c79874-ac3a-4f58-a763-d00c0ce4838f", "sighting_of_ref": "indicator--605948a7-9199-4409-a511-b8c22c20e1cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ba143f-35ad-4d89-9ebc-5ff671257979", "sighting_of_ref": "indicator--7dc47891-7469-4d20-bee8-c1458b099754", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a837b7c5-e44b-48fa-9036-6ee7f6072e75", "sighting_of_ref": "indicator--0b0b7948-7f9f-4c5b-8cb8-538d771ea012", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832c37f1-3ddb-439f-8f00-d672f9bc9750", "sighting_of_ref": "indicator--05716554-f3bc-41b7-a9ec-21ebea8b5074", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b222a1c-224d-41a8-af57-44939efba88f", "sighting_of_ref": "indicator--61bda572-ba26-458e-b6c5-3a0a3441780c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed42907-c2e7-41ba-9acc-b1de1d9b0526", "sighting_of_ref": "indicator--ab0f2b05-0b94-48e5-b6a3-79ffe35b0d89", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf6ede2-c859-4e1a-ac12-228f7a2d003f", "sighting_of_ref": "indicator--4eea75da-8df8-4223-bd44-f6d109bded30", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49e2733-d5b4-4bc7-a724-76256d6f03be", "sighting_of_ref": "indicator--f04eea29-9272-4a57-afcf-da3bed9266bc", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34035073-762c-443f-be93-111189720231", "sighting_of_ref": "indicator--6ee00ad3-0011-4948-bc90-a3b9da12245f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0366c41b-26b1-49fe-9098-fca17f4e6e62", "sighting_of_ref": "indicator--21d200aa-cb98-46fb-bb1b-24a03f7a1d2f", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00af6a3-4e74-4872-b152-f139eee3dc8f", "sighting_of_ref": "indicator--1033a7f4-ca7a-490e-acb1-36a22f234711", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b84d54bb-14b9-4f67-bd0d-099e90654b80", "sighting_of_ref": "indicator--6f7edaba-7126-4c21-bdc8-1b87a91d52a4", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95630ed7-88c1-4524-99d9-1e57b43f527a", "sighting_of_ref": "indicator--8d7171d5-0ff9-4cb6-bd24-62eccf483c1f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41f6636-e090-4c90-8c2e-ad890d19bbc6", "sighting_of_ref": "indicator--b41cbc18-2109-4406-a824-be9e2f408848", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16354b92-90c0-4b1e-943e-e81b0272b8cb", "sighting_of_ref": "indicator--2448f095-b08f-4676-a216-3360e5ab00b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2228d3-fb58-425b-94e2-92a9856c6b3f", "sighting_of_ref": "indicator--2f011246-88ea-4d3e-a2bb-86c583b0096a", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7119d77c-808d-479e-bf76-ebbb5d848dc3", "sighting_of_ref": "indicator--efd41c6c-47b2-4ce4-a1da-86c03fa31c12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d81cb33-f027-4d0b-a82d-e34644a56556", "sighting_of_ref": "indicator--b59f0fb9-52b9-4a24-adb3-68950de636b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50750514-1edd-4d0c-a6ec-0fc961c14b0d", "sighting_of_ref": "indicator--faada3db-e562-4c89-8e5a-8bb30ecae334", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb08094-8f91-4362-b93d-6ae127ddbc53", "sighting_of_ref": "indicator--b3db32e3-7be0-48de-93c7-f876fa0e3934", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3db42cc-5d3a-4c1c-a014-c17b1165c70a", "sighting_of_ref": "indicator--2e01e1bc-e84a-4005-828d-4336533bfe62", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1d1c0b-89a6-4397-91b6-a6ae4c76ebef", "sighting_of_ref": "indicator--91e74091-5a70-48c6-8f1f-701b6c5b3768", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d35ea8c-386f-4ac4-8286-9ce24ae6dff1", "sighting_of_ref": "indicator--c6aa2567-d1bd-426b-a7a0-466ab9da9bd2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c9c7cf-ab9c-4775-9033-2d7b6ffab8af", "sighting_of_ref": "indicator--e881090b-3ac9-491e-ad8f-d86cbf39aa22", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3367ff-a5b3-43a1-ba39-9672232ae537", "sighting_of_ref": "indicator--bdc21a9e-ee40-4aa4-ae6b-2e063f321cb1", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40a7453-cbfd-4d92-b28d-8bcaee69f1e5", "sighting_of_ref": "indicator--4b40c014-d711-4367-bcf9-4c443214ec3a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c0d383-fca4-484e-988a-1f068175392e", "sighting_of_ref": "indicator--348d454c-28cb-4b17-8c67-71944641fd8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f8b90f-078b-4b6c-beff-e9be02a1203d", "sighting_of_ref": "indicator--64074730-23aa-4c3c-a3bc-3be36eedcca3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e919267-8b0c-47f1-a349-004a41cd4134", "sighting_of_ref": "indicator--994a3056-483f-4f94-8bf9-5a13e52d5fa9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107a0d77-67cc-422e-9859-1d8a6b01b0fc", "sighting_of_ref": "indicator--ad62c871-39a1-4b23-8017-20dc98f7a707", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40a0aca-c701-4618-8be2-4219504bfb6b", "sighting_of_ref": "indicator--69e7ffc9-f255-4fb7-9a58-984d1228fcbc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1c7c1c-8644-4802-8ca7-f0d38e170b36", "sighting_of_ref": "indicator--c8caf52e-858a-4549-8b09-e502f064eaab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacc0ad8-fbf4-4be7-b1ac-01911265e3a8", "sighting_of_ref": "indicator--b28786f5-01b8-4e8a-9bc8-2f6e7c9f7c9a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081e1788-7e5b-4550-b3a5-d362a8987047", "sighting_of_ref": "indicator--d49ef5ec-4d79-41ef-b665-1c3ee1658930", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e472f9ed-eb69-4881-804a-b1b61893a699", "sighting_of_ref": "indicator--3d610f0b-b39a-4fff-a6e6-2ce664c97139", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d418009-e7bd-4403-a06b-c83521638927", "sighting_of_ref": "indicator--f312c3f7-0d77-4be4-9a89-59e3998c2b22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71a03583-8c46-44de-9b88-5760f1e54bfa", "sighting_of_ref": "indicator--9f6447d3-87c8-44af-9628-35a088ee583a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03eabc9-eea0-4c35-8e94-f6968d659f97", "sighting_of_ref": "indicator--f770aeeb-d09c-4654-8224-9cbf78850bdc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1bf8f4-e301-41e2-82a8-3882871be97b", "sighting_of_ref": "indicator--639c6618-4456-4978-84b9-0b860d2fbd03", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29ea426a-512d-4ec0-9aab-3dec413c1ea4", "sighting_of_ref": "indicator--63f38558-6a6a-4192-b84e-19f3f45e0694", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a45b8e-1f8f-4024-b461-506be30e6325", "sighting_of_ref": "indicator--9feb1bc7-d7bc-460d-9c84-e1cb2049a375", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22f6fd3-f742-47a6-9c3f-b73eb5c29c7c", "sighting_of_ref": "indicator--0610ad1b-b784-450f-a6b6-fe06862bd5b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990a375f-0905-4816-a24f-bb7b09797715", "sighting_of_ref": "indicator--43beab9f-9cb9-4d25-b606-e2ff8d2e537a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6d7c10-6381-4c8d-bbf9-228c9a938689", "sighting_of_ref": "indicator--6296901f-fb76-49fe-8dde-25bc66c97ae5", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba25a50f-ca70-428d-b8d0-26549ad7e61b", "sighting_of_ref": "indicator--4c3f5a55-80eb-45af-8900-6f8a37233cc0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e54b48c-325e-4e2f-b680-331b73108cc6", "sighting_of_ref": "indicator--73234ea5-6286-45a4-811b-7d693d794321", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf05d28-9074-4b90-b9f8-a19ac168bee6", "sighting_of_ref": "indicator--489d3973-50b5-4029-99e7-a74658e2c5fb", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11775e74-21b2-4a51-a384-912e8f0c112f", "sighting_of_ref": "indicator--f78591a6-d305-4783-980d-3c3b3298850a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6b0bee-97dd-426c-ab01-e86229732486", "sighting_of_ref": "indicator--fd43b280-7314-4b42-9dd3-d21dcd7933b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d64781d-2500-4a05-9502-55ab9195cb99", "sighting_of_ref": "indicator--2ab092f0-eee2-4693-be63-642666fd6611", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c0138c-87bf-4cbd-87e8-17f9f13ed62a", "sighting_of_ref": "indicator--c76f9b3e-5e19-4984-b8e9-42db888d72c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174abdf3-ae1a-4ef9-9109-be751d49b93f", "sighting_of_ref": "indicator--a63f2f20-3410-4a70-82b3-64bde21348ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8762080-eebe-4a5d-8963-a0f812ccdf26", "sighting_of_ref": "indicator--9dbd592a-8faf-4cd4-b6d7-b02302d4d7d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6042672-0e28-497a-adb5-14b87682ee7e", "sighting_of_ref": "indicator--8eb3babc-e310-4011-8f2c-d1aa35c20c00", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec8812e-dd21-4b49-a34b-ea3a7a3f216e", "sighting_of_ref": "indicator--c7f8f067-9542-4823-9112-1344aefc2821", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbab2413-c3f7-4400-bfa7-a682b4306e72", "sighting_of_ref": "indicator--e2574a8b-cd73-464b-bbb7-580febbbecd0", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab617798-21cd-4908-a046-84ef845d65f0", "sighting_of_ref": "indicator--bf4db500-6d1e-4ea0-a8f3-f2b2049042f2", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed34fc69-dac2-4286-b781-5afe9c973a20", "sighting_of_ref": "indicator--ff7c8065-25da-4d45-8d5e-b46722324835", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c9511e-3f5d-470b-9368-3ba97f9c6cec", "sighting_of_ref": "indicator--72a38c02-d156-4b4e-8f83-faa3b58dbe9c", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4df24e4-738e-49bd-a830-f88b53b8ff06", "sighting_of_ref": "indicator--6aa71c84-c1fa-4978-b2db-133c6a57b370", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5f2a0d-8a65-4f97-a5d7-5f827f78981a", "sighting_of_ref": "indicator--a99f7778-3a9e-402a-8046-da402a8b20e5", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--addd2b0f-4ada-4d4d-b90f-8629cd6b071d", "sighting_of_ref": "indicator--ae61571c-82c7-4d68-8aac-2f83e7ffa9d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839aa027-be39-4288-9d67-90536be2237d", "sighting_of_ref": "indicator--4e4b362c-bb4c-47d4-943f-ae3b4e0878ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0998d61e-4726-4ca1-bf5c-14d6af485d24", "sighting_of_ref": "indicator--9175f334-bbcc-485d-9a68-931f3468cafe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543bd3be-e802-40b8-9c74-18643634ace4", "sighting_of_ref": "indicator--99aef7ea-1a36-4e06-b965-b644582eccd2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2caa37-a46b-4f78-a965-2fb598686c26", "sighting_of_ref": "indicator--b6521f1f-8b72-4f1e-a1c4-2613eb32eb61", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2fd7c5-ee8b-41ef-9baa-463817850113", "sighting_of_ref": "indicator--3c01826a-73b7-41a4-a839-6728fbc276ee", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4abf9e46-e8d8-4533-846d-1588f5621f2c", "sighting_of_ref": "indicator--533afb34-6591-4224-b726-21e650519a1e", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ed88af-8a47-4f78-9fa8-eb2c5ed2a414", "sighting_of_ref": "indicator--d9d15b7b-b25b-4a1e-ad76-3bcef9900250", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ae670b-8704-43c0-9281-4467cf4140ff", "sighting_of_ref": "indicator--c0245507-223a-44e9-b6a5-3db8a2b7cd22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39124af6-6d26-47e7-b3e5-fa452f519f9e", "sighting_of_ref": "indicator--c0245507-223a-44e9-b6a5-3db8a2b7cd22", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77db5ab-80b5-4177-8392-b9a3ce9c9522", "sighting_of_ref": "indicator--fdaeb0ef-4a95-4ac9-9dd0-93903e5ddd5d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a320d3c5-3b4e-4c0f-80e8-4a09124f38e9", "sighting_of_ref": "indicator--82081489-18a8-4957-bf8a-06ea59fdf897", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99486c73-2549-4e03-b9b8-af66b86aedff", "sighting_of_ref": "indicator--68bf770f-e328-410e-a2d1-0dc27ca568d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b6efc10-8485-42e3-844d-db230ad288df", "sighting_of_ref": "indicator--86fbd5ce-b7b9-4062-bbe6-910c4e8a300d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e64c58f-b850-43fb-a934-03c79ab194f4", "sighting_of_ref": "indicator--4af9bd24-08d1-4e30-a80f-a79acb664ab7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbff3c73-7b37-4804-9e80-f093a100ac0b", "sighting_of_ref": "indicator--57c11a37-b135-4a63-aa1d-a5f7f478e668", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a78c2f4-20d4-4a2b-92cc-3b20922c06b9", "sighting_of_ref": "indicator--faae2f3f-3511-428a-9595-b296e9faf310", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b5af73-1d3e-4b42-8579-ed27ad263050", "sighting_of_ref": "indicator--ffc313af-4b08-4df0-94b6-9f45afc51a2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25e52e6-fcaf-4c35-a801-6cd06bf5a6dd", "sighting_of_ref": "indicator--7fb842fc-dd3d-4d07-ba8b-9492faf83581", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcafdd9-d5a3-4c99-b921-45a9934de437", "sighting_of_ref": "indicator--76d0e93c-858b-45eb-9a86-e070fcd2a58e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480dd64a-3786-4da2-93bc-b110f07f636e", "sighting_of_ref": "indicator--6fa3ff8f-f6cb-4b32-bada-8b9a833c137f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6abe8394-20a1-45f9-b74f-68a18be39661", "sighting_of_ref": "indicator--f9532d4b-c0e9-4990-891d-a396b0637bda", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abcbdc72-2d86-4d42-b28e-7817f3e82fa6", "sighting_of_ref": "indicator--e3648673-cee9-4944-b032-78647d799e5f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c718aca-5081-4261-a7c0-1c573f0d4933", "sighting_of_ref": "indicator--a98a2904-20fd-4a03-8813-ed18e397b724", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b90cd8d-2021-473f-b796-576d7dfa5db8", "sighting_of_ref": "indicator--1316c7c8-e52b-4a7b-9ab5-b310d7223da5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c305cf4e-678a-4f8c-bf34-8d1cd0b9094b", "sighting_of_ref": "indicator--5a9c87fa-6d4f-4f0a-b7e4-9d671c8c1e0a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac6f478-4d70-4022-b4d7-1e05055c34c9", "sighting_of_ref": "indicator--b0bb9c8c-8e99-4e1d-8021-117758141ed7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a03fbb73-b67e-4ae8-9ead-c7ca0e6f76dd", "sighting_of_ref": "indicator--e1bf2ad9-24ee-4293-9a99-bb1ecfd93cab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477703c2-dbc3-4da6-a705-38a53992d973", "sighting_of_ref": "indicator--9c582632-2bbe-41ea-beff-a1064ab41517", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af43629-ebd5-44ad-a0e3-7ad8eb7cb1d5", "sighting_of_ref": "indicator--ff610c8b-12fb-4e95-8447-a055a87e5e75", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec57d24b-b6c2-41d7-b7f0-7f6e3d3004dd", "sighting_of_ref": "indicator--39345707-5c97-4c46-87ce-b4ca8b180b2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047108a7-c4c4-404b-93e5-c0356098b6c3", "sighting_of_ref": "indicator--67bdde2e-3f99-4b14-886a-f72afe2cc57f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd37b58-bcb6-405c-9315-bdede86c4d8c", "sighting_of_ref": "indicator--30e4c6bf-3dce-496c-858f-63e1a7f2705e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9e4422-0a99-479f-a4a1-9ea379de9172", "sighting_of_ref": "indicator--e7f276a7-1d87-4e40-8a5f-0761651d8e94", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83fb9ec8-8f72-4c38-8c67-7433a672f539", "sighting_of_ref": "indicator--2e070321-2e0a-48a7-aab1-a81020488bf4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27f960a-ddf2-4f1a-aeea-e496ea3953ed", "sighting_of_ref": "indicator--05640dcc-a350-479d-b007-0a8d072759e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d7da86-dc37-4e7c-9365-7e71b4096d0c", "sighting_of_ref": "indicator--6ef6ce9e-a2d5-45a1-b65a-85655c181bfc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacc437f-277a-4468-b78e-ef0136934a78", "sighting_of_ref": "indicator--0b4cc094-248b-4a6f-9525-19e187f7f3de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799612d1-4a6e-4fb6-90cf-c1ef8c67e3fc", "sighting_of_ref": "indicator--40967fda-c9e3-4b9e-b9b9-d6f38fc70fc3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b63a4ef-d49a-4273-87b5-b63c618a0d94", "sighting_of_ref": "indicator--a51b24cb-b02d-4cd6-97ba-2c4b7b791986", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--419c562b-a494-47f2-95c9-2091e6af3351", "sighting_of_ref": "indicator--7e78beca-cb3c-4247-b2f2-81d611b9a8ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54faec85-c13c-42f5-a933-e3223b1aa7d6", "sighting_of_ref": "indicator--584a0043-1d47-4954-bf36-909f793b93cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c507acd7-e34a-4e09-b2f8-ca63315dc702", "sighting_of_ref": "indicator--9202462e-2886-4dfb-a357-69acdaf83561", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9259404-8f3b-46f6-b1df-820e7e70f750", "sighting_of_ref": "indicator--10b887f1-9e0c-4ade-bf2d-f960ac36f2aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c673038-4ae1-4268-9b14-63f455d9a2c6", "sighting_of_ref": "indicator--ca7742c9-4b31-4b04-9ccb-c00724b62add", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26df2ad9-259a-4e5c-ad3a-e27454a3a490", "sighting_of_ref": "indicator--0731554a-8000-4f6e-8256-9c6d19138592", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd6d3b8-e729-4c50-8b35-8aad6ba433ac", "sighting_of_ref": "indicator--6ea813be-bff2-42e3-9d12-6aecbbbd1763", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108c6c22-354a-4651-877b-796e680170b3", "sighting_of_ref": "indicator--ed6f59b4-cd4a-4d91-a877-2f2034ec3ba3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f659007-ecaa-4e27-be75-24835ad80506", "sighting_of_ref": "indicator--fd6a23bc-b35c-45fd-9634-ab97c8b97832", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72944ab6-3387-4f64-8ca4-d8a9529d6240", "sighting_of_ref": "indicator--d1bc2f97-e79f-4c2d-beee-da7ec546b9ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcc5614-43ac-4873-897e-dd034246ab90", "sighting_of_ref": "indicator--d21ffe79-03de-4d38-bff8-82a72c072712", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e940724-5c98-434e-bfff-fc460c4482aa", "sighting_of_ref": "indicator--cebd6693-b3cf-487a-ac26-86657631d215", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea106ed-f50c-4bab-9562-d8c1bd0e6955", "sighting_of_ref": "indicator--9dd50f06-0fd7-49c3-923b-3d3f38b79a3d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893d76ff-6cce-4b3f-a00b-cfa797166c8c", "sighting_of_ref": "indicator--55f63769-3938-40b3-9b24-7d06ffe5a096", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5caa6637-bff2-4e6a-a3e1-ee3a1237e2cf", "sighting_of_ref": "indicator--c0e7668d-fba0-47b5-ab2f-0a9899faba98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07d50ad-437e-4cc3-93ca-812e623107d2", "sighting_of_ref": "indicator--23e588d9-8166-42ad-b49d-8abaccce4e22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc788a1b-27eb-4068-b1d6-d9240595a73b", "sighting_of_ref": "indicator--d6a226c9-45ba-4eaa-8c62-28c88827c6c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f58f9cd5-66dc-4a66-a72a-24e3bfc9b0a3", "sighting_of_ref": "indicator--fe1b5d3a-a02b-422f-8d3c-831445432b91", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5a9498-4bbe-45f2-bc16-a1bf0049b7c7", "sighting_of_ref": "indicator--02fdb7ce-8497-46fa-8680-b04ee6ac60f1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2867b2-95a4-4e57-95e0-f2aeb6717436", "sighting_of_ref": "indicator--94cdddce-4241-4519-8eaa-7c4654a00cf7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c6040b-4b75-4a1c-9aef-eef415b3e38d", "sighting_of_ref": "indicator--b3a1f92f-6829-41f8-a640-41a87aa1b754", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db493aa-5137-4795-b21d-5b68fa08a108", "sighting_of_ref": "indicator--eb838c88-7599-482c-ba5d-2c4233469d13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9821606-2dcc-4006-9b53-0da6dd7b72e4", "sighting_of_ref": "indicator--321fc2e5-7934-4cb9-97ca-6e1a1acdd3cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d338401-6edb-408b-9bbf-1489362951e2", "sighting_of_ref": "indicator--23e33959-3001-463c-ac61-87a26668de18", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5287d424-d1b4-4dc4-9d85-5db95c21d9ed", "sighting_of_ref": "indicator--cbaff342-4935-464f-924a-deeb8d269c26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47a72e4-fd53-4bdb-be0a-8df0ca051fbb", "sighting_of_ref": "indicator--0f2e2356-62d5-45fb-b5a5-4425f7787b35", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944114d4-6f94-4853-8d44-0893f099aeea", "sighting_of_ref": "indicator--13f55bb9-4a4d-4b85-89ff-b144bc8ebdec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e41094-bf2c-4a05-aa36-ada2243e907e", "sighting_of_ref": "indicator--721c44f9-7c66-462b-a315-51b18988c59d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5255f6-33e6-4426-8f99-ee4d79fe2445", "sighting_of_ref": "indicator--a567ccc4-779e-4d91-8d6d-599dcf7e2aae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a40cda4-db05-4ecf-9ded-3be23740cf0b", "sighting_of_ref": "indicator--a0a6ebeb-f1eb-4685-9af1-fb7cd8d720d4", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6906b54-cd15-48d5-9c2e-f0c1bebe4137", "sighting_of_ref": "indicator--3a70e476-aaaa-4161-b1ee-25dbdf9b1d0b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b2e8fb-5a46-4546-8af1-0138eb4b2f53", "sighting_of_ref": "indicator--30201e62-a64e-4b7d-952c-92d89c17257c", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ec9e9dd-ae48-4726-ac85-3fa1e8b37305", "sighting_of_ref": "indicator--6c6cd94c-7a01-4cae-b615-4336238c6b4b", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372830d5-b531-4be9-80ee-0c63878023aa", "sighting_of_ref": "indicator--7711d7d9-8691-4c54-a4d2-863b320e36a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a045a21e-e4a8-4c67-a501-fb49fbee41d6", "sighting_of_ref": "indicator--a708d5b5-77b5-4655-a4f8-8b390887df25", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450ec600-522d-46ab-80b1-5c92deeda183", "sighting_of_ref": "indicator--032e1f1d-c2a6-49db-8c6d-bd67c49fea27", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18916234-fd36-4d00-b0e7-880c5e075525", "sighting_of_ref": "indicator--a3800a56-8da0-49d0-baa6-4af7b16d838a", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a185b2-2778-441e-a3b9-eb6c6cc24bf5", "sighting_of_ref": "indicator--e92ba4ef-47dc-4187-ac89-7e5b22314704", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c2637f-0903-46e0-b2c2-905a846df6f8", "sighting_of_ref": "indicator--e1f563fe-b33a-4f3a-abb4-cb894d005824", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f083844-2e27-4cc8-b46a-d29d5b434536", "sighting_of_ref": "indicator--844e1868-1334-4651-b7ae-772334522bc8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ecf3a5-6329-4956-8cb8-db230465e307", "sighting_of_ref": "indicator--7e14ad92-6ca5-481e-8487-6dd3f1dfb46b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e8c03b-dee4-4eec-bc58-0dda5ce64e4b", "sighting_of_ref": "indicator--d797bc8d-9085-47b4-8e39-18907e8f2be1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b596a883-b404-48e5-8774-7bd382d02ddc", "sighting_of_ref": "indicator--e3f086fd-3b70-4d7e-b44f-3ae5fef7b785", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb1d338-af72-41ea-a802-7550a94b5a44", "sighting_of_ref": "indicator--91aa60c5-b772-40d3-b281-4a992ab57cd1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61d8f25-8c08-44c6-8cff-6eda02e45a45", "sighting_of_ref": "indicator--6f041d28-7b64-4b49-8507-a749b51fd630", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a61b7b7-4b1b-4713-a860-2c6fcd1f5324", "sighting_of_ref": "indicator--6b86477f-668b-4d9b-938e-1ce9858d37e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76a8966-dd48-41f9-bb10-3149a642c087", "sighting_of_ref": "indicator--1c4635d8-c117-4e52-b437-abfdcd3e1896", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7da4ab1-f393-4509-b3d0-130ad8178eb5", "sighting_of_ref": "indicator--00e49472-64b2-44cf-b37c-8f633f32555b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f893e96-3d8b-4fcb-bce1-7b9818f08bbe", "sighting_of_ref": "indicator--a03bfec4-dafa-4d77-8767-677918fb1a7e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c49a996-c397-458d-a886-816028895b0b", "sighting_of_ref": "indicator--16502c86-6a3e-40e8-b547-27440eb38f58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6f0f82-3a4b-4e0b-a4f7-b591212f4468", "sighting_of_ref": "indicator--f20f7151-f9a2-479a-97e6-9f786a70d611", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f1b646-8f1b-4913-9f31-cdf4f23521eb", "sighting_of_ref": "indicator--aae79d9e-363d-460e-95cb-ff69a50c9994", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4613ab7-942d-4738-9b8d-9824ab9b65d3", "sighting_of_ref": "indicator--890f5fef-09ea-4bd8-a865-7c00853039e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946d7b0c-0b81-436e-88b4-31b60fc92d34", "sighting_of_ref": "indicator--734a0429-176e-4afe-8e0e-45c200eecc53", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c057902-c36b-4fe7-9a1e-a7a9c55f9795", "sighting_of_ref": "indicator--05d1f0c4-34a3-41d2-b3a3-9f2b70e1fe87", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87a2053-0c17-4d0c-9b92-d539b8b68aa5", "sighting_of_ref": "indicator--561fdcb8-5d4c-4648-bc1d-59e9409628be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50e6cac-762e-42d0-a336-05e529fcf49d", "sighting_of_ref": "indicator--55e2d214-ffda-4d46-a486-c74f83d004dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04cdaff9-7682-4b1c-85e0-796791c0bd08", "sighting_of_ref": "indicator--f4d8893b-9643-4e96-b3f9-d792a7853f45", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf70eaa-4e5a-4701-9b32-b1a9c1d60fa1", "sighting_of_ref": "indicator--cf7ff473-dd37-4018-81b8-d0ebf19ac387", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e41ba49-42dc-4ac9-8276-16993fa28781", "sighting_of_ref": "indicator--f988c9a9-0852-4213-83a4-6d17af49b639", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc18164-8502-4fde-ba28-37bd13f30820", "sighting_of_ref": "indicator--c2dfbc09-daa8-4513-ac99-0705099af184", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a963ad57-7a91-4c27-9940-cccb03881f6e", "sighting_of_ref": "indicator--e303266a-32ae-45ea-9445-0ec66cbf27d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d08d26-b016-4837-ace1-e21641aa5f35", "sighting_of_ref": "indicator--413301c1-0786-454a-a78a-e4c855e4a4ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b81b3a-7611-44ce-95cc-f788ad5c68f7", "sighting_of_ref": "indicator--b331edf1-ae2f-4236-90be-c5463ebc3c40", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdce926-c6f4-45fc-80cf-ef2e63e352cc", "sighting_of_ref": "indicator--c35c4348-e789-4f49-9678-63408614afe9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6c4df1-6bcb-4390-b00a-b40836e5613f", "sighting_of_ref": "indicator--f0a70917-45ba-4ed4-8d92-fb7895239802", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346198f5-f3f0-40ec-ab8d-b3d680f4a241", "sighting_of_ref": "indicator--04e4c99f-7922-4a7f-b8bd-fff7cdcdd29d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb5496e-9b40-4f03-acd0-b93283ea426c", "sighting_of_ref": "indicator--f906df88-64a1-4c23-b220-7f91e48f7d5a", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbc862e-fa66-4d66-9aea-c74b4ffc18e5", "sighting_of_ref": "indicator--5f8168eb-fd49-4cd9-a108-9aac4c2f207a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bb581d-a2b8-48d7-81f6-0d9478406610", "sighting_of_ref": "indicator--21ca37c5-3dcf-4c6e-969f-f35215a3bf2b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08cb9e8-8c46-4018-beb5-63f87cd77942", "sighting_of_ref": "indicator--2207a4e8-7a3b-4630-bac1-5544e453f7ed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324afc35-9b6d-43d8-ad17-8593197167f2", "sighting_of_ref": "indicator--79e14351-3cf0-4331-99ce-522184b8b177", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ca00ee-4e0f-4013-ad45-183d011b5640", "sighting_of_ref": "indicator--aed2f63d-d598-4ade-aa90-45c8f01400fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf3e13a-0d30-41d9-b4c3-67df637d11e6", "sighting_of_ref": "indicator--29abe3b1-f781-486d-a465-e7559ce7be31", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1535c216-ab61-4848-81df-c4f597928bd9", "sighting_of_ref": "indicator--56580ebf-d3b7-47bf-aed4-1217086b5599", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03fa24e-d5e5-464a-9cfa-ac75d756b363", "sighting_of_ref": "indicator--4f4c19e8-db00-439d-98f6-8c0aa6df2192", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41aa1bc-dd76-4b96-842b-f5afde601a7f", "sighting_of_ref": "indicator--0c8df949-d38e-4c14-ba72-69478060ac21", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395aa801-cb0c-4418-8724-91fc87921893", "sighting_of_ref": "indicator--25536832-839b-428f-af4f-05efb75dee1f", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbf1a15-83a8-436b-bf86-fa22d829d32c", "sighting_of_ref": "indicator--9a433440-8ea2-497e-9976-054a9b9227a3", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84034935-603e-490f-a060-4a5e393d5ca9", "sighting_of_ref": "indicator--4ffee445-5daf-45c7-8c64-c3c60eb69562", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0d0be18-3a2c-44d2-ad9e-5cdb35323f65", "sighting_of_ref": "indicator--55247861-65cc-4e9b-8ca1-0fef2831f270", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fbee27-b2d4-4e1f-bfbe-3f163b6a4792", "sighting_of_ref": "indicator--adb9eddf-6f12-43fa-983b-1e5103f9b5d1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8340ee-01f8-41d0-8533-c3f7b6e487a7", "sighting_of_ref": "indicator--287bd8ab-fc64-42c0-920f-1efb887d6c92", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9b5ada-bd0d-45e9-9326-c05fd21a19a9", "sighting_of_ref": "indicator--4c2dbd5d-9259-4cbb-8429-a4f34ee216a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8b6457-4a9a-4e1c-ae66-df0e1d2b04cd", "sighting_of_ref": "indicator--b14b0485-4baf-4f00-8e1f-30a1d2967a74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94854acf-f01a-408b-8900-d6b94d8138c6", "sighting_of_ref": "indicator--18766027-6264-44c9-bc93-1845889f877b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97fb8ff-9779-4e10-b98b-d6e76ae8f6a8", "sighting_of_ref": "indicator--3acd23a9-04b9-4b1d-9a17-42f0fd4eb8e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf326f1e-8997-4712-bc39-1e4ca5ad64ba", "sighting_of_ref": "indicator--5c10ee55-9a8e-435b-9c4d-35666bff688f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3661dd2-ef30-427f-88fa-72857d27cfee", "sighting_of_ref": "indicator--1623f6ed-7e3f-49f0-a08e-a43523dd2b7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28041e94-a46b-4472-98a5-8af2a175dfce", "sighting_of_ref": "indicator--5e4d3a70-6ea2-4cd6-8836-1b7db402b6cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46af041d-889c-4fff-bdb9-a43323dff479", "sighting_of_ref": "indicator--5fff289b-5f72-49d8-94ae-6c1cb56e94c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d9f35f-72a4-494d-bc22-f93e20c7ec03", "sighting_of_ref": "indicator--50d9fa15-75ed-40ce-a80c-f7dc6de777cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d09dfd8-8cec-43d7-95fe-4250ba1b6ddb", "sighting_of_ref": "indicator--88641e81-b6a9-4488-8e95-cd85c2116e1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8327b19-eba5-46b9-969e-2296df86b527", "sighting_of_ref": "indicator--ddf7fa9d-bc6e-4626-9a40-6ba6c1d2f5c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a04239c-f919-4da5-bb6e-8e52ca22b20a", "sighting_of_ref": "indicator--17cc646a-d614-43ee-b80b-fe69009eddbe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7c6d7d-1e96-4f34-bce0-e30fd0d04905", "sighting_of_ref": "indicator--0f87df98-89ea-47d9-9101-0d36404ebfcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2b0dad-c231-45c3-a5c1-1ac53ec13de6", "sighting_of_ref": "indicator--749353b7-5828-476a-8fec-9c5309569692", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fb9ea9-644c-4268-a75c-2d1a5c16add1", "sighting_of_ref": "indicator--6049044b-77da-43a6-9e1c-a3f6d1a7699e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309e363b-5bfb-4f75-ada6-28bb0b7b1102", "sighting_of_ref": "indicator--42b4a83f-8eec-4942-a21d-437aca9215c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76d9f95-43a2-4173-9a4d-b0bba113be50", "sighting_of_ref": "indicator--8c6735e5-6b49-4621-befe-ea1ba12e57dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70839521-2e83-4d51-8667-27e57e045321", "sighting_of_ref": "indicator--4109b295-a5b3-43a5-a344-9037dc617e4e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4198f8db-1f5f-483b-b13a-cd0ddcbd7a37", "sighting_of_ref": "indicator--7c2954e6-c7c2-4b63-ba03-0cb754e41b7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a4929a-608a-4f8c-a430-4193cd504c03", "sighting_of_ref": "indicator--60d19f20-01c7-4c44-a921-9a53b424e16d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818ff893-57cc-4dcd-af39-e5a3e7371680", "sighting_of_ref": "indicator--1198a308-bcd4-4e22-9f23-b39e120669ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69085154-cdfb-4d1e-9b5a-f7f307fcd8a9", "sighting_of_ref": "indicator--cc9e2cd8-8ec6-4cdb-9539-cc5cf3220e27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefe61f5-2eec-4e36-860a-2a7a0d6d5239", "sighting_of_ref": "indicator--aab9351d-5752-48f5-adfc-8e41ae575d28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b214c4be-f864-40d5-b9a3-858ffb15d3ba", "sighting_of_ref": "indicator--74a3b782-dec0-4e3c-a31b-6f2b23a194d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d559cd8-5272-4dc8-a2b1-5f75143a2d16", "sighting_of_ref": "indicator--c0c4b72f-453c-4b77-925d-3b4b7388eeb1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e1e506-6feb-420f-af5d-c1f2c741a275", "sighting_of_ref": "indicator--cfb26c89-a45f-41d1-bd56-26e8c273d156", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac4eac5-b9be-4361-9c71-8aa9243dd79f", "sighting_of_ref": "indicator--e0278039-1bf6-41df-9c38-13b1d97d3456", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786afe17-b0f4-4583-abb6-bea51d87dad3", "sighting_of_ref": "indicator--780532fd-c0c0-4b97-b11e-f3f127e23920", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e3a7c4-6a3f-44db-9a5f-305dacfef80a", "sighting_of_ref": "indicator--c75d2cdb-430f-4ed0-8b99-5df489fa5bf2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169b38e4-a167-425f-8b0f-4f4c345a7dd0", "sighting_of_ref": "indicator--3ba0ed39-d5f0-44be-a752-5b64be00483e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79292d8b-e31a-4581-9a67-c80130c10121", "sighting_of_ref": "indicator--1c81c030-f7de-4a4f-8f14-b475ddc0a863", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed26078-d54c-4163-b580-4cce92ecc8d4", "sighting_of_ref": "indicator--c5ad2c75-f7d6-4594-a94b-ba6e2ee23cd5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b89276-198f-4fd4-bc64-66846a331d8d", "sighting_of_ref": "indicator--d0756a99-c454-421f-9a24-0e00cb057bc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321e4c98-efe1-4699-b7b0-19defb0cba1c", "sighting_of_ref": "indicator--68488c5d-12e0-4f9d-b179-32ac02b97883", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4815cfb7-7a43-46bf-844c-5057b7d0ad84", "sighting_of_ref": "indicator--1c39510c-117e-461c-9641-c01054d43796", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b1a0c7-8e42-4a27-9aca-1d2bfb0b8fdc", "sighting_of_ref": "indicator--ad848617-c5f5-4dd0-a592-066f5cacd1b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bff0b7-6dc5-45ce-8f01-b0aa51ee9e10", "sighting_of_ref": "indicator--9e2256e7-a053-45a4-855d-66a05b8d09c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75469f7-960c-4444-bcf9-e42771b4dbe0", "sighting_of_ref": "indicator--d12ec3a1-b0cd-4323-83c3-78a63895dedd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7824383-3f2c-4dc3-86ce-a0f7d8e54c5a", "sighting_of_ref": "indicator--1f7649b5-9b38-433c-912f-d57941d3c352", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222ffc8f-7853-4414-b70f-bbdd2b157fb4", "sighting_of_ref": "indicator--16abc784-979b-4f35-af58-766abb9f2140", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49526063-168c-4dd4-ab5e-689b7891f794", "sighting_of_ref": "indicator--07618120-bf26-41f7-bc04-104f2fd505f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78fa608-21ee-4e16-9ddc-5250cdaf5b97", "sighting_of_ref": "indicator--b0cf2830-a71b-4ba6-8ea4-0a26ef65ed77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c9fe44-de11-48ba-b5ef-44f69132afef", "sighting_of_ref": "indicator--0c8fe903-7271-4394-8e35-9cdc429f6d64", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667e19a0-73d2-4b2d-8a1f-dceb28ed7913", "sighting_of_ref": "indicator--62a85b42-210d-4ccd-83ca-0b25edcaf935", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4ba694-71bb-4680-b975-f0725bcc3eb3", "sighting_of_ref": "indicator--4d23de10-17be-4227-8c8b-a4824f1463e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac1648f-24bb-45ad-b169-f56a8d995fd3", "sighting_of_ref": "indicator--781d69f9-b188-4455-9101-dcd9c9da0d96", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9147c8bf-9f07-44a5-9b35-22981c583b98", "sighting_of_ref": "indicator--dd12055c-b994-4d57-a272-041f52cfcf58", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7539aec4-3d0a-4007-bb92-62ef79621d18", "sighting_of_ref": "indicator--91743e48-26fe-4ebe-be00-fa15a4aa7a99", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b00a86-7ff3-4133-9fcf-0df66ef1acb2", "sighting_of_ref": "indicator--4f6bd9e4-ed40-4340-a4c8-65da0700c813", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760e423e-c8d0-46e2-8548-9ce6e2eca8e5", "sighting_of_ref": "indicator--8c41e83d-2c9e-44da-b800-01bd10042ba5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4999757c-72f4-4fea-9266-34c5c96c6e12", "sighting_of_ref": "indicator--c21ef9b3-bb19-4447-8020-9ef60e0c90ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5373a36e-4ccb-4cef-8967-3b881ca4047c", "sighting_of_ref": "indicator--e738ef6d-3231-44f3-8f03-a10e3e9ca1e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f09f5e-d44e-4d5d-8537-15a29b4f80ef", "sighting_of_ref": "indicator--6583e535-5598-4fd3-906c-6cb93c5e37ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00af4ec2-5fb8-4ee8-99cf-5014cd4a367f", "sighting_of_ref": "indicator--e38dc59e-7b76-4494-bb8a-c9dc7b5bb428", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674e5016-ce26-472b-bbbb-66416377c009", "sighting_of_ref": "indicator--810289f3-584d-4214-bcaa-3e80839e5e28", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3071d986-babf-4fcd-8b5f-619f16713edb", "sighting_of_ref": "indicator--909b0174-124e-46dc-86eb-f84091af2b23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edbc700-e30e-4312-9515-95010af4c94a", "sighting_of_ref": "indicator--662d7bd1-d84c-487c-aacc-dde7c4465da5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e31d00c-e7ab-4fd9-9858-53281b7450c8", "sighting_of_ref": "indicator--b56bcaa0-f6d8-4636-8a70-36e9a39ee97c", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7c1533-c154-43c5-bf05-e903b305d35f", "sighting_of_ref": "indicator--af12bd11-c265-46c7-8918-5741441c4952", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790d3291-6172-45db-b183-ca0ea6da9ce2", "sighting_of_ref": "indicator--11384873-5324-4a3d-b02e-6027e9d7213c", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3366ccf-8e64-47ba-a9d8-e7f9ae3d465f", "sighting_of_ref": "indicator--422587fb-1379-417d-a96e-ce637ba7d5a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f58d417-7e8d-494d-b342-e700a0386792", "sighting_of_ref": "indicator--925e760b-1def-4b24-94d6-4fc012111759", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233a32bf-731f-409e-a65a-546fa69c788e", "sighting_of_ref": "indicator--3c1770a9-142e-4b01-aabf-02f55bdcde00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1285a364-af15-457d-9bad-56a6971f9782", "sighting_of_ref": "indicator--fe0a613c-3247-4fee-8ef9-6d4d69c8cda8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d514e142-c83e-4c66-a67a-cc7b8eee097e", "sighting_of_ref": "indicator--6cca7a29-820d-424e-9190-87a64b0ede30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b343d1b5-e97c-4815-8fd1-dd7fcbaf2252", "sighting_of_ref": "indicator--909592d3-e19d-42cf-a562-5ce458430833", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f49f146-a10e-4446-8eab-8c9fe113400a", "sighting_of_ref": "indicator--bab9f0d1-ced2-43aa-a5a8-1ad0c44b2a39", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a1631e-b987-4f40-9609-e074d5ca1f45", "sighting_of_ref": "indicator--49ea37b9-3ac5-4119-b866-745d46e1c89b", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ddc565-c36a-4506-9321-8ddf8a03b34c", "sighting_of_ref": "indicator--d2c9a31c-67fd-4159-8152-f76896f03f26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ae10e6-9222-451b-b971-d76773719687", "sighting_of_ref": "indicator--03277900-5e99-4eeb-b7fb-1b261009baf3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c3f8ad-bfe9-4708-9561-cf874d33e853", "sighting_of_ref": "indicator--efe055f9-1430-453b-b96a-d00efcac8b4d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc69372e-772d-4bf4-952e-dd79e9b1a0d5", "sighting_of_ref": "indicator--0e1a4179-fb8b-4f34-86c5-a70405741596", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09574c95-49fe-4f0e-ba4d-6fd7d51b05bd", "sighting_of_ref": "indicator--164f1793-48e0-4a62-b8d1-b7471773be36", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc34c9e-4d26-4c21-8d93-25848cd8679b", "sighting_of_ref": "indicator--23df3fb5-4297-47e0-bb30-6972627fb0f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30e7ad6e-768d-4561-aa2b-dca9fa65b5dc", "sighting_of_ref": "indicator--81e30b81-443d-4a0b-9abb-c159d9d9dae1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13f5584-74df-44a5-a3a2-317b864964a6", "sighting_of_ref": "indicator--c0950689-ddfb-442d-baeb-b1572a444c2d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49bd6c2-5f7c-499a-b712-3125501d89ce", "sighting_of_ref": "indicator--b1ba9027-2b10-4b9b-bf1a-1600e45be2a2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebca0d9a-3340-4461-b172-a1bf0b7babaf", "sighting_of_ref": "indicator--6da5e211-866e-4703-9cf9-589a0e65d79d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678b66d3-cb71-4891-8d4d-d4dc6cd2c88f", "sighting_of_ref": "indicator--c64581d6-b73d-48c9-ad0e-8200199c0647", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99f05f8-0319-45cc-9473-be7dfda9b5b3", "sighting_of_ref": "indicator--16991502-3321-464b-92c1-6dd036af9136", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e047721b-76dd-4839-a011-c84cd7468740", "sighting_of_ref": "indicator--c08909ce-6636-482d-82ee-b6578154fd7c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8fe992-f48f-432b-a296-97e78423a9c1", "sighting_of_ref": "indicator--8f34e0df-aa14-4232-b948-37b7abb192e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dc9971-43e1-4ebd-9e97-a10dc2d72355", "sighting_of_ref": "indicator--432f7507-7e2d-4364-b1ad-e00b3daf9a33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3067631a-055a-48f7-a5b4-5dfdf3f4f903", "sighting_of_ref": "indicator--8a585435-0174-471c-8df4-1d92f315d9e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb0f24e-2bb7-44bd-84f7-87a271894f31", "sighting_of_ref": "indicator--ab8f6365-8cd4-4ac8-a8bf-c1ada5d8930f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2daee110-4ff7-4db3-982a-556736833003", "sighting_of_ref": "indicator--8f584a49-51d3-4377-aca3-ed45cfeb0df3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c747f790-078a-4c33-8c7a-a9935b686028", "sighting_of_ref": "indicator--dbb1b601-ba0e-4fe6-9eb2-57fc7489cda2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f25aaa8-fd7d-4e1d-985f-1fd162fa29d6", "sighting_of_ref": "indicator--9d92be87-6a09-4df8-9810-4ca38452b25c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e80777b-40bb-4695-a95e-a1bec7c9a57a", "sighting_of_ref": "indicator--24699949-2d68-482c-85ac-b2869d00b8d2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db48a370-80d7-42f2-87bf-8c6631f47c2e", "sighting_of_ref": "indicator--e3a041d4-e983-4bfb-b391-e603f8da2760", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b863817-ea01-4ad6-a32e-a264baf37330", "sighting_of_ref": "indicator--95bf3011-9939-415e-8cbd-288cf8c59eff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedfdd22-f514-4e71-a8fe-8a89929581de", "sighting_of_ref": "indicator--a466c230-2f94-473a-b28d-fe5ae53baa13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f43fc7b-dc91-4e40-a656-221329455d9f", "sighting_of_ref": "indicator--838a9dde-fa18-4b50-8ca3-85a2f81ce821", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de82e5f3-30aa-4213-8505-de2528d75043", "sighting_of_ref": "indicator--ec658b78-9d91-4316-a53c-bbfb5f20738d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f182a862-0301-4349-8264-bbd50d49eaee", "sighting_of_ref": "indicator--833bbfcd-94b3-4849-bd38-6ac26bcf1b09", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d151d153-0c3f-4ffa-983a-c4eb21927a57", "sighting_of_ref": "indicator--7f2a5f83-2869-4512-b667-7aaa5a6d59a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffa141f-9513-4ac7-a85d-2417788686ea", "sighting_of_ref": "indicator--197d95c5-3a84-4012-a942-869e0aaad0a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f54dc4c-3424-4c92-afbe-3e8af9806507", "sighting_of_ref": "indicator--8d6ea664-9cc9-491d-b091-944d47cee618", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3adc03-4c46-4b90-af71-a8166568d471", "sighting_of_ref": "indicator--b305330d-9336-4325-9b5f-9020fd3e19a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462cde6f-9cb5-4a60-9f7c-ded9f59adf8c", "sighting_of_ref": "indicator--e0c4d45f-1214-4f1b-ab78-a469704e6412", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9b5ebbe-c216-4dcf-8cde-6718c992125f", "sighting_of_ref": "indicator--8099bcde-ec6a-4e27-bf4a-2ab6932dab8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab44389c-38ad-409c-96a8-1094933da4e3", "sighting_of_ref": "indicator--08ffa3f9-5c8b-4241-a874-11fd7e15ff36", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d8b54c-9cbb-43ae-93ad-d4e8909f22bb", "sighting_of_ref": "indicator--12daaebe-920d-40ff-8f8c-fbe9d402cbf2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6032348f-ff6f-4e73-8d84-20f3c16a8f3f", "sighting_of_ref": "indicator--da6feb81-ea0d-4e09-8838-8d15b66b8256", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e96a5da-e151-41ba-8871-818244598904", "sighting_of_ref": "indicator--ab81f793-9525-4fed-b00f-11bdf07d4cf4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce52101-9575-4518-88a0-3a85add8ce4d", "sighting_of_ref": "indicator--c829921f-5543-4ee6-ba32-81cb0f7106d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80adfa2d-aef3-491c-b503-48e230a537f2", "sighting_of_ref": "indicator--6481b851-a25f-4bb7-a4cd-0baf2903d262", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b81b1b5-2727-48d3-b172-3fe156ebbef0", "sighting_of_ref": "indicator--d9aff76a-2c79-4ac9-8a2c-22b38a1454d9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac7ac5e-e2d5-42c6-9eb3-a57415206780", "sighting_of_ref": "indicator--6596612f-7b58-4cfd-b9d8-f7a44db66906", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab54e91f-db68-4314-933a-4f76c871c933", "sighting_of_ref": "indicator--58dafb1b-8b72-4ed0-9502-8e19572c8873", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9def8bd-03c5-4711-9f42-c5bfd39a7b41", "sighting_of_ref": "indicator--e2be1483-a3ce-475b-9f15-c1f8d93c73e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31953f8-2d97-4f61-aab6-76b0f90480f0", "sighting_of_ref": "indicator--040782a3-8051-4d7b-a86d-cc0c4d515762", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4dcc87-964b-4a1a-9e64-313bc6ee865b", "sighting_of_ref": "indicator--a6b98a15-cee4-48e6-8a2c-388d3c3358fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebed0488-37ff-48d6-b775-7da83b22d6e9", "sighting_of_ref": "indicator--a6f526fb-85e0-4a8b-81d9-f563b4ee5b58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efb03b1-2a7d-49f5-858b-ff4fa56037c6", "sighting_of_ref": "indicator--90f2bd38-ac4b-43a3-80c8-394e811b95f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dbed5e-383f-4d84-ba46-c13a12a27409", "sighting_of_ref": "indicator--1d1dde37-1ca5-40d7-8080-602f00eff296", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0201c62-e73a-473e-b7f9-3d7766e78c89", "sighting_of_ref": "indicator--891959d3-21b8-4ae3-b5eb-f965f75efc3c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947ae0d6-c301-42b6-9c8b-325174355330", "sighting_of_ref": "indicator--6415fda8-1e76-4b6c-a00b-98b3f65f42b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7902f45-27cf-4119-9d7c-4338a4091efd", "sighting_of_ref": "indicator--46014b42-de4b-4edb-9f4f-b8ab10e66ab4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60f1387-fac5-4107-8a92-6b765b30e0ae", "sighting_of_ref": "indicator--8341216b-9f55-4f8b-92e9-54521f7b1608", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e11644-c211-4017-82a2-2554f0dde7a1", "sighting_of_ref": "indicator--3eb5f278-31bc-42da-b5b2-54d20b2f09f1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f4c9cb-e1c6-429a-90ed-a012115e4090", "sighting_of_ref": "indicator--4dde8baa-012d-46dd-953c-ad22d6e520bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e94d3ce-3804-440c-8af1-25e22659d5c3", "sighting_of_ref": "indicator--47e5a7a8-6ff6-4596-9a72-4c162fa9fefd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cc84a6-7fee-42aa-9c29-c56a7d2dcbff", "sighting_of_ref": "indicator--4fe865c8-9354-4d02-b607-ee7609ce3230", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1ef97f-c311-4bfd-ba2a-54eb17996119", "sighting_of_ref": "indicator--3f23fae5-52ec-4556-9704-596697ca896d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9332ea4b-620c-49a3-904a-5d9e59c3dde5", "sighting_of_ref": "indicator--c230056c-f413-4c4a-850c-fb6ab0cb1611", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348f3e95-d7a1-425b-895d-e299e66326e7", "sighting_of_ref": "indicator--58cd8b11-2860-4b7a-982a-3b89a8cc35ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8a6f2e-6f74-4909-bd10-933ca736e974", "sighting_of_ref": "indicator--49be39fd-ffb3-4adc-8479-185850704455", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d98f9f-623e-4094-810e-6598b0cbf25f", "sighting_of_ref": "indicator--95406d21-f247-40ac-aadb-9791509fd05c", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1eb3bb-ac0a-49c0-9b54-65e3579f50b1", "sighting_of_ref": "indicator--8960a23d-1573-4700-a090-329828e7a6f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c77536-cbcd-483b-a8e9-874a460e5641", "sighting_of_ref": "indicator--631226db-c07d-4519-b210-2e3f55fe8f13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbf98ed-d7d6-4af7-ad5f-6f21d4c96d83", "sighting_of_ref": "indicator--c1eed788-d9aa-405b-80c5-f0d627b8e3f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c054134d-2388-4f87-abe4-6e893813f8ea", "sighting_of_ref": "indicator--828e35a7-ca15-40c5-9b78-df828c9a8808", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee26c712-0023-42d8-a0e2-408045224aa1", "sighting_of_ref": "indicator--7e438203-f4e6-4efb-986b-d8e76ed67249", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82719088-b2f1-4a76-a68e-540a0a868a3b", "sighting_of_ref": "indicator--3565f94d-1c25-48be-8565-bcb84f922e9c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81385a08-697a-4036-9960-32ce901e5ece", "sighting_of_ref": "indicator--3dfe8b49-036e-4173-a359-b51468400a0b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76990956-7565-475e-8f05-2903ffc5ebfd", "sighting_of_ref": "indicator--412ff1d3-9b84-41c2-8308-2e5591eb4567", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ed957c-cee1-4345-8d11-926e17ddf8c0", "sighting_of_ref": "indicator--9767adb9-437f-48ab-8f17-2ecb78a01ab6", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8db7352-ff15-4fb0-98a5-e80fb192399f", "sighting_of_ref": "indicator--8360b438-2d91-4f30-a2bd-b169232afacb", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d2f3f8-1a0a-46e2-bfbb-d5d2fbdfea45", "sighting_of_ref": "indicator--517a587c-9dc8-419b-8d72-b4c8b5e6bf1d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b4e519-5489-4a60-8a41-2c277e20b306", "sighting_of_ref": "indicator--68c88c0b-6ac9-4693-bfad-c7fe5ad303a5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d12572-b215-4f1d-878c-1c956fbf36e8", "sighting_of_ref": "indicator--af94d16d-8e8b-42c2-a10a-81a64b0ba5b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d7c411-dd83-4a15-a8c5-b102af818ec1", "sighting_of_ref": "indicator--569ca587-5bc0-439c-8382-d73ef89ecf1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8af4ba4-09b0-41e6-a282-805e23517c46", "sighting_of_ref": "indicator--9b6eabcc-9a45-4b12-b5af-a517e5687d0c", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205c7da9-50e5-45de-bebf-3f5ca3d78536", "sighting_of_ref": "indicator--378195a2-8faf-4fb3-a5a4-3c336b1e21e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23dd421-5dd6-4f94-b56e-cff34cd297ee", "sighting_of_ref": "indicator--666f2146-5a11-4339-b727-4eb8336d06f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe9dfcf1-7a27-4085-bf42-120ac81f381c", "sighting_of_ref": "indicator--f53f323b-7848-4644-b608-3fe0d77caf00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0081cf77-cd51-46e9-9d69-e5d0b594e176", "sighting_of_ref": "indicator--e67ff9c6-5e09-4284-b2ec-a9cd05293823", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a80fe5-c966-4d3a-babd-11bb1edff83b", "sighting_of_ref": "indicator--eede27af-2c5d-43df-b781-e14840fb9cf5", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df593366-b349-445d-8698-1e3087b38c99", "sighting_of_ref": "indicator--18dbe88b-3bd0-4249-9415-cfe32a509031", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683d46d4-e915-41c4-8c1d-60c3196112a4", "sighting_of_ref": "indicator--25569cf9-7259-4a49-8871-f06a8cc08d96", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d288a05-5e73-4f54-a973-1a5b868466b8", "sighting_of_ref": "indicator--076752c6-4610-4580-82aa-b3bc6adabf4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3835c0ce-bfd1-43ba-b793-8ce1e60221d3", "sighting_of_ref": "indicator--be1959d5-b540-427a-a8d8-be5f5ea66815", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdcf0d2-9053-40ba-ab63-319cf01f1347", "sighting_of_ref": "indicator--406da547-57ed-4695-b9ad-8bca38192409", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07e32a8-c6ca-419e-aec8-80e526ae27ad", "sighting_of_ref": "indicator--81c39c68-2557-4893-99e4-c509f21a18f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0ccfc0-43b4-446c-acdd-4dc7a3d54872", "sighting_of_ref": "indicator--62ecba3f-5391-43fc-af7e-daef57c9e483", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d6885c-1743-42ad-8729-3188dc4b652b", "sighting_of_ref": "indicator--0965c4d5-596b-482c-b735-84424bfc06ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ba6532-aa2d-40fc-8485-271c62e040d6", "sighting_of_ref": "indicator--147946fe-d164-44a9-a50b-a80f5287c511", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0212e0-af33-45f9-9440-4dcf545e9f06", "sighting_of_ref": "indicator--75f87540-30dd-49ca-8869-61701262bd16", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6733ff7a-9ee1-4432-a6a1-d13c5d7621b0", "sighting_of_ref": "indicator--116f4faf-650d-462e-ad35-03f12d2124ed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b6adc6-fd0a-4835-b97e-31506f78ae3e", "sighting_of_ref": "indicator--8e092c71-78b7-4f73-ba2e-a2be222ca1a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a5a23d-1b7d-46b9-840d-ed699b9393b1", "sighting_of_ref": "indicator--531e5c18-2bea-4607-8143-b914c7b59161", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4aa3c7-5635-49dd-b1ae-0f628b6d2799", "sighting_of_ref": "indicator--321362d2-080a-4b25-accb-d65c2d7004a5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb338637-56ac-4b28-9b5d-b7ce791d1515", "sighting_of_ref": "indicator--5a26bc34-8e05-47ac-9409-54ffefcf8662", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c1e0e4-a3d2-48a0-a57c-039c671d546e", "sighting_of_ref": "indicator--e23644a5-85c2-402e-a8e6-3b9718295448", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbaa74f-e2ff-4ddb-96a5-fae489ea895b", "sighting_of_ref": "indicator--e15b1609-8b02-4a36-9c04-55c1772d52ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855c67f5-9ab0-412b-b214-3e5839423741", "sighting_of_ref": "indicator--54de06df-326c-4e8f-a4f8-14545d2137be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acc85db2-1cbf-45f4-8079-f923373740a9", "sighting_of_ref": "indicator--4d3b4f1d-8248-4ea9-9be8-4671bf399506", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f49115-92ce-49d1-9c02-188683667d5d", "sighting_of_ref": "indicator--d9e4275d-3428-40c8-9462-05186f1f552e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e73f4d-0629-4993-8c30-0aed1b54d0dd", "sighting_of_ref": "indicator--4259afd7-00ea-4fac-bc88-5767041d4fa9", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706e151e-f504-405d-bbbd-bd2e91b4057a", "sighting_of_ref": "indicator--f3b64952-8edc-4504-a6c2-e02b802063b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796cadb3-e90e-4c24-95d7-0465172cbf70", "sighting_of_ref": "indicator--e4d0e775-88c5-475c-bda7-4caed47edc65", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a4fe45-6d06-458d-8755-f9664ee9ca97", "sighting_of_ref": "indicator--d561e6df-920a-41a0-81ab-37152d7ded84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd58820-27b4-4b70-a0e4-d56aa83719bc", "sighting_of_ref": "indicator--10756e0e-5785-42de-9de6-393b3f27ff9d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf053b24-03ae-45ba-bb5b-f32b233fcabd", "sighting_of_ref": "indicator--627f07ac-67e9-4267-af85-ab9bd49e1451", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3418ee89-4b6f-4562-ad55-f043a0dd2315", "sighting_of_ref": "indicator--151447b9-cfde-4e28-951d-d2569884f166", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b77c41-7c01-43e1-9871-1ea5ab8f82a9", "sighting_of_ref": "indicator--121e00e8-e390-4911-83e9-b6f750b3ea37", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643582e5-26cd-496c-a1b8-49d478a1e7ce", "sighting_of_ref": "indicator--427fd4d9-54e7-4d17-92f1-2ad82c1ba92e", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b473a145-5e5c-459c-8cf2-108d99cceddb", "sighting_of_ref": "indicator--3e624e1a-9490-4745-861a-9f95ff5df51f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21fc000-611a-4e7e-a1e6-bac8648bf2bd", "sighting_of_ref": "indicator--424c8ba4-3f00-48a1-af11-0813494ad257", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2acea8-f1fb-4d4f-a7e5-81b9e062f738", "sighting_of_ref": "indicator--9ac1ce9b-7dea-4af2-b733-7795b8964ec0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a128865c-ce93-4053-a57b-8c60b720c1f3", "sighting_of_ref": "indicator--c0f6a83b-38ca-4b49-a6b7-fe3bf97e5438", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c578809-c130-497a-995d-ef839290a4b6", "sighting_of_ref": "indicator--f311e85d-e41b-4df6-905b-b7c89a9ed611", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450338b8-dcfe-4d5c-900f-4f75be3da777", "sighting_of_ref": "indicator--86856abe-7078-4274-b8f0-1e4966e68a88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6664f87-346b-44f2-a5a2-4ce8458f2422", "sighting_of_ref": "indicator--4ddf2e07-90a6-4795-8e05-30d4eb87217c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b852d1e3-cf94-4a1c-9895-fdad940a93c8", "sighting_of_ref": "indicator--67ac2d76-ef0e-47f8-9fa7-4161e5b20447", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b930086-7574-48d8-b8a8-e24d490d285c", "sighting_of_ref": "indicator--9a77ae4e-db55-4f9a-81ca-01750eee0881", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c263667-d17a-4d29-8150-ccefaf4df9ee", "sighting_of_ref": "indicator--0cd82a98-f17f-4a57-972f-0a03ba2edb12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284e89f1-8fa9-4e7b-ad35-254de7383f03", "sighting_of_ref": "indicator--6ef7430e-b71f-47f8-b1f7-e72d14d873ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71574891-f68d-4a5c-81ac-df6867051119", "sighting_of_ref": "indicator--bb9d8b9e-4f4c-4e55-8976-e7bffd55b452", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f961eaf4-a646-4cf2-b770-23f74f27018b", "sighting_of_ref": "indicator--87dd7389-5ba3-44f5-96a6-a1ccc47e9601", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23abe8d-1936-44dc-9cd9-fdd288ec1333", "sighting_of_ref": "indicator--f334feb4-bbe6-4a69-a736-efca6c32cdf6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1299b303-3d60-4e17-beea-7022cb8a783d", "sighting_of_ref": "indicator--22143681-7a48-48b2-acfc-b129f795c8c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa705aca-d7bc-4e4e-b8d8-ec28d7ccc1e1", "sighting_of_ref": "indicator--a417f71e-e9a2-4c0d-8a82-bf0015209286", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c72795-b772-4a12-8cf6-313e13159faf", "sighting_of_ref": "indicator--7623acfb-5980-42a7-b9d8-0a9412f70742", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c11258-2e4b-4889-9b35-5e1f02128983", "sighting_of_ref": "indicator--47760b9d-37b4-47e4-80ee-46fa42d0922b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1872115f-f9df-4458-8a31-1b1af355dd5f", "sighting_of_ref": "indicator--3348b713-275b-46e6-bffe-3adbaf8212ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2db15a4-ed89-48b5-b327-a50a64af9ff4", "sighting_of_ref": "indicator--05bb940e-cf4b-4943-ac32-95746afb5f30", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ff833e-8d50-4c6f-bc26-79eb77cf505b", "sighting_of_ref": "indicator--df254898-2c29-4383-b76f-839528527f8d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f64ef5-9a7d-4bed-aab3-d38c91327a9a", "sighting_of_ref": "indicator--8f9eb00c-8c94-408d-a1c9-cdb272fc5099", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7673282-f926-4d47-b985-4a3479c8531a", "sighting_of_ref": "indicator--ac4f4c7d-38a0-48b0-b9da-c100c44f5728", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23610c1b-7f56-458b-87d2-dc9d4df75e87", "sighting_of_ref": "indicator--2853de1b-3e00-4b13-84d5-6cb1f4a54506", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76803fde-691a-4600-879f-4a67b26d8677", "sighting_of_ref": "indicator--677ee892-ec5c-4617-9f26-d15d39bea615", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58dd51c2-1f63-4f0c-ac33-5365c4b928e0", "sighting_of_ref": "indicator--e5b2c577-61dd-4ad7-99a8-0c48bd9ec551", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6349b81-5a9d-41ca-a375-f2ce2070edd6", "sighting_of_ref": "indicator--9bc32da4-2eaa-4e41-9d35-eaa81601fee4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a5a5b2-a8f8-4270-b625-b87a84720755", "sighting_of_ref": "indicator--67bc300c-192f-441a-9065-adc0a91ff282", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a9ae66-aa29-49e5-89e2-edc41bd29fe3", "sighting_of_ref": "indicator--ccdf2dc3-ab3c-49d2-8d1f-227b27db1343", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f64e4e9-d3eb-498c-a34b-2ff8923de8c8", "sighting_of_ref": "indicator--4f098e70-726d-4db6-af7b-544b65a430d2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa0730c-f409-4615-a720-d4d1be0529da", "sighting_of_ref": "indicator--d34677c5-1185-4957-bde0-f3d94b0de434", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3c502b-4e5f-46d9-b779-d4cf834e07d1", "sighting_of_ref": "indicator--e462c3c9-92cb-4e58-8deb-3d98f7b06ce7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da69ee6a-027d-4f6d-8f6c-d15e0a88af8e", "sighting_of_ref": "indicator--d255d1cb-f7c3-485e-9e16-512dce14af2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0cebe5-bf8f-442d-8f50-01672a0374cd", "sighting_of_ref": "indicator--13e87412-8e24-47d1-acef-19a91a687235", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c986d6f-b2fb-4787-9245-26a4b11cb6b6", "sighting_of_ref": "indicator--c41581e8-2568-4bad-bc75-44893e35e570", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36119333-53ab-4bf0-981b-a5fadacabe20", "sighting_of_ref": "indicator--78098756-c6cf-4806-a7e3-3fce1bc5f0c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d3c9a8-3144-4d0d-bfeb-71d66ab4008b", "sighting_of_ref": "indicator--d9d6d7f1-7bab-42e6-9e47-7f3435b43b6d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14d7155-f72d-46fd-a1d3-1866e9bea981", "sighting_of_ref": "indicator--decc5551-e417-40a1-ade6-71339b5eec43", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb1786e-c363-468b-ae8e-52491e59b9c2", "sighting_of_ref": "indicator--b9a01c7b-4631-4734-a2ef-515e95739501", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ffa206-eba4-44fd-9821-6be6a802c707", "sighting_of_ref": "indicator--df439737-ed63-4629-9a0e-e0c4580e26fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d77ced-b941-4f1e-b499-e3ec336fa03e", "sighting_of_ref": "indicator--c65c9232-389c-40ef-9d82-1859bf5e731a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f58c49c-f11a-4370-8df1-cd4675f7ded8", "sighting_of_ref": "indicator--eb9c90eb-ce87-462f-8053-68a73b18eaa7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de9e6db-6069-48b7-a735-6eb01aa42e03", "sighting_of_ref": "indicator--31d68d6e-b195-4d00-9cd1-b03bae397842", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4202697c-29ca-42f2-a4f1-2a9157a33b28", "sighting_of_ref": "indicator--6e26425e-ef99-4faf-a6a7-4d2a167e25fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b615ca-494f-4a52-8e70-f44236fb19f0", "sighting_of_ref": "indicator--4ff43424-a3c6-41e3-a2e3-0e45bde6d8fb", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5802479-303e-4c8f-b384-7ab55308aff5", "sighting_of_ref": "indicator--1e787d9f-a00d-4577-bb1c-2b9119b9ebd6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9558746d-2761-4973-b87a-2aca864b9244", "sighting_of_ref": "indicator--89a81144-040d-4cce-8e88-dda92c3ecea5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f353e8-f3d5-49a6-b050-f90ed4b83be0", "sighting_of_ref": "indicator--5541d81c-95af-418e-ae9a-94030bcc377e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b502eda6-3981-4793-91dd-79a17bce737e", "sighting_of_ref": "indicator--350f3d35-050b-4664-8e63-f39d76b3ece2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164805af-41ef-4a31-814a-1777249fcfdb", "sighting_of_ref": "indicator--bbc782bd-cdd5-4a12-b821-cf22861f6b28", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9243c1b0-52b0-488f-93b7-c135767d987c", "sighting_of_ref": "indicator--3f827c17-aaa7-41b4-b2f1-1c2a5a85b15e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766c3b1f-10cb-44a4-8214-234a3dec7b95", "sighting_of_ref": "indicator--0db19d29-19d1-4d93-aa40-04d82bc41b60", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a94469-230f-485f-b490-2a6d28a71bba", "sighting_of_ref": "indicator--a0c1b656-733e-47a4-8982-d5d516728f9a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b7732a-e7ca-4c2d-969f-b1e97f3cfa1e", "sighting_of_ref": "indicator--2d12223d-e85e-44ae-9b91-d3461da3dd51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7e81ed-84f2-44ee-833c-56c2d2de254c", "sighting_of_ref": "indicator--77a0a1b0-41ec-415a-8552-2ffee8ef0733", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba922a6f-bc5a-4d94-8f57-6c50430d69d6", "sighting_of_ref": "indicator--afb8f67e-7454-4ca3-a92b-555c36d2f19f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bed10e8-b427-4f83-9e6d-623291d24a79", "sighting_of_ref": "indicator--96738886-4887-4146-a095-4774f649e8ec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04002daf-5c82-4003-8864-cb3496bce41c", "sighting_of_ref": "indicator--e1709024-cc57-486a-ad9a-a11fa9ee0a45", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d04216-fa79-4baf-993c-6d7f271088b4", "sighting_of_ref": "indicator--6731a262-fd20-40de-9fa6-aeb266e7fdab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a109e1-70c5-42d9-b2c0-ad6c1142b0b8", "sighting_of_ref": "indicator--5e1c3e67-0ab3-4652-b07f-e7df07c6acdb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b552fe69-a16f-4507-92e9-af39af952c6f", "sighting_of_ref": "indicator--8af7dc89-0da0-49ac-af33-d43fe0f9909c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ce888b-56ea-4548-ba79-4a1a1d7e191b", "sighting_of_ref": "indicator--c96fd808-00b4-42c0-83d8-fd492a5b74b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ed460e-f0e0-4475-8efe-be22f75854f2", "sighting_of_ref": "indicator--64c32809-771a-43c7-9d19-69c408866357", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800d42da-45b0-4fcf-ba05-5e9fab07da0a", "sighting_of_ref": "indicator--2707adf0-fd26-40f4-b7f7-255433faf6dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54233cff-11a7-4028-80ed-dbeb7aa2a6e2", "sighting_of_ref": "indicator--fbd64f85-b487-4bc0-88b6-34156a3866f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4027fb-3e54-4862-b46b-182990e03dc1", "sighting_of_ref": "indicator--25084ecc-20ce-4175-9177-b1ad152df56a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65d4ffe8-8e60-4e32-9316-5c0836c4f68d", "sighting_of_ref": "indicator--6684927e-c371-4ad4-bd5c-634a6e990175", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322b1127-b3d3-40f3-a4a1-33667a437b34", "sighting_of_ref": "indicator--c3ee7152-9c3a-44ca-a637-f683dac981fe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b976a7d-835b-41a9-96b9-fc9d5723f821", "sighting_of_ref": "indicator--c4eca177-d033-45da-9cdb-4b4355cf70d2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d49957-27be-44f3-8a28-2f75716e0a9d", "sighting_of_ref": "indicator--1354b15d-bb8e-4fcd-b940-47ecfb111bfb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92e1b12-a22d-40ef-b72e-48cb80ba9d7f", "sighting_of_ref": "indicator--52b7f4fc-6205-4c0c-ae97-10edcc263227", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832ef379-af9e-47e3-a91e-14c234a02bb1", "sighting_of_ref": "indicator--c332f928-c26b-4b76-8ef0-d2d3ccfcc0fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f499f5cc-cc89-46bf-b782-7e716e016c4a", "sighting_of_ref": "indicator--f93aa617-3b15-46e5-bb62-874723cafb31", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286d66e7-ca1b-471b-b989-d4c8ef5aaeda", "sighting_of_ref": "indicator--45573fbe-4c17-44a4-9ddc-574c8b7c45cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b652feeb-5575-4f8b-8a09-82656363aba0", "sighting_of_ref": "indicator--cbbdaa7c-154c-4b25-ab3d-20bfdde2243b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd0db5f-1738-4d66-ba05-81e8e8f80349", "sighting_of_ref": "indicator--151e536a-c170-46a5-9bad-28ee7bfc55c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d16922-97a6-49d9-bc3c-550128d57381", "sighting_of_ref": "indicator--5df8f759-eea7-4545-aa2d-8c59607f665d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7077f286-569f-4a7c-9e08-759bf6175b59", "sighting_of_ref": "indicator--7b62333b-7467-4392-a55b-988b93e083dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e7e0ec-5939-49f2-bf13-fb2b1865e4c5", "sighting_of_ref": "indicator--fe17cab7-51ec-4940-8d80-7e60f4671c70", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463967ef-ae4a-48de-898d-77ba4f3c839c", "sighting_of_ref": "indicator--416c6cfa-dded-4e58-a064-7398dc677ffa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1180efb0-a44b-4ec5-ac99-72cc0254cad1", "sighting_of_ref": "indicator--2c7a4857-1c55-4847-b5a9-af4be98b7b7e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9029e25d-902c-4f3e-ad43-5d5ee6f764e6", "sighting_of_ref": "indicator--db5696e3-eeee-40c6-af0d-dbc8a98ee33a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2233f4-7643-4221-8f5a-b991748a4f33", "sighting_of_ref": "indicator--5cd390f4-02b1-4049-b15b-0e02d9d44b97", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071209a4-b9af-40af-a706-0dc8f27036e2", "sighting_of_ref": "indicator--7c97133a-0865-485d-acb8-7c496d6b4dce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d80e90d-789f-4425-b190-b15d30e3de7f", "sighting_of_ref": "indicator--a365c1d8-d470-47b5-944d-e00d3cb1213c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b7838e9-8be2-47b9-923b-c6a2eac85ac6", "sighting_of_ref": "indicator--1a7cbaed-7cc2-4707-9f38-1833399e035c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a49089-2e0c-4ac5-ba54-07e344e8c6ec", "sighting_of_ref": "indicator--74585b74-b886-4c1a-b9e8-4dbaf456dc00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceedd79d-8f1f-46da-8f5c-2b8e6b4e7afe", "sighting_of_ref": "indicator--61295b13-bb78-42f9-a303-9a7dd8890cea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6022e3-dedd-43c2-a9e9-46a38b4295f0", "sighting_of_ref": "indicator--c520aab6-e5f5-4363-b76f-9e9885ef5e15", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f682e0d7-b578-498a-b538-ce11f2403e32", "sighting_of_ref": "indicator--9ab9c341-5911-41f8-9c9c-b119b7cd1354", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad743de-b259-4df5-91d9-5e473b2928b1", "sighting_of_ref": "indicator--e4ef0c13-fe9a-44c3-b6a3-707601d92c35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb99ace-588d-45a3-9506-800f16d6e454", "sighting_of_ref": "indicator--f3cb7f1f-0c5a-4613-9f27-bb05152a7499", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fefb85e-3b02-4ce4-b003-8a495b23a23c", "sighting_of_ref": "indicator--f6caf142-94e6-46c8-a6c0-4a27f0e7b065", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15302d0-db67-4cb0-b9d8-4ca05471d086", "sighting_of_ref": "indicator--01e22c75-5188-49db-bfbc-c92bc5c07b45", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d076a04-c638-442e-91e1-7682aecb2798", "sighting_of_ref": "indicator--c8dd0272-6574-453c-978d-652179dc73ec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559aadd4-b89d-42c1-9ee1-312156553c4e", "sighting_of_ref": "indicator--7d7af127-5813-439b-9169-0345fb40c2b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe6a796-abc0-4c9c-af23-b7841867935f", "sighting_of_ref": "indicator--c9096ff5-5187-4cff-bdd8-9ecea488bfc5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3b9fa9-ec00-4bfa-9f89-21a081eab911", "sighting_of_ref": "indicator--e1e62041-2de1-4e6c-9666-0c9438dfb14c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5be09e-73fd-4c22-b659-a8b9a3760e0c", "sighting_of_ref": "indicator--e8d09a90-0376-4b57-8c57-6f4ee4d185b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf49657-8d24-43d6-b565-c29cc870227d", "sighting_of_ref": "indicator--c9b20d67-2001-4fc6-89e5-24d545646f57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc7ace5-f9e1-434e-8a38-855b35c1d9c2", "sighting_of_ref": "indicator--dee8a823-3cc0-447b-9369-059fd951999d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e6e818-7da5-4bd7-be48-0b830f16c712", "sighting_of_ref": "indicator--eeb11461-0e63-4fbe-960c-eb4427d42961", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c1a628-d369-4f03-8171-1a7821ac0d9d", "sighting_of_ref": "indicator--d74ad6a9-1a57-4e70-97ef-609bce366d3f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1153cb1-3d50-4fcb-8b36-65e30b3db6c1", "sighting_of_ref": "indicator--bbf95376-7f61-42e9-84de-9d806bd96a9d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de2cfc8-99d5-4d44-81af-f102cda61205", "sighting_of_ref": "indicator--61864524-2302-44d8-97c7-6ad8c5c07e70", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c55920-1b44-48bc-94db-d71ac2e618a7", "sighting_of_ref": "indicator--11ea4181-2bf9-423d-ac46-0f8e0cdddde3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d57d7e-fd6e-4207-9cdd-6ffcfb7eb7bf", "sighting_of_ref": "indicator--00d47cb6-8252-43ab-bb6f-b32ca364327f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--808fa4ba-8666-4263-bc97-272ef28b56a1", "sighting_of_ref": "indicator--9d1ce085-cb54-459f-a93d-657d19d5a4af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92dee46-5bd7-4059-b58b-634065ae60dd", "sighting_of_ref": "indicator--69582309-992c-426e-a2d1-dde0e318d987", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a33131-7139-4495-b080-e4504e150875", "sighting_of_ref": "indicator--76be93d7-09e3-44c0-a43f-4ff3c07495d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93555ccb-0927-45fe-8ed0-eec496e4d58f", "sighting_of_ref": "indicator--70d3ea42-7541-429c-a53f-cb188cd5e47f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc1a09d-9add-4392-ac4f-509695059f29", "sighting_of_ref": "indicator--0c7d0dcd-fcd3-4708-8886-12ccf1f78006", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c3733d-8bdb-4a35-9121-c0420fc47e3b", "sighting_of_ref": "indicator--931330e3-5a70-4717-96db-c555cb4c3b32", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7344322c-6a66-45cd-b165-26dce0bccdb6", "sighting_of_ref": "indicator--cd354bba-8e89-4937-91c4-ea7fd3ffba61", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5815bbd2-c2c0-4db3-a0a6-429de0ea83e7", "sighting_of_ref": "indicator--92875751-64ba-4340-bc39-4fa31564720a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17529c5d-cdbb-47e5-9772-377f892071dd", "sighting_of_ref": "indicator--3660ca2e-008b-4a47-83ce-e0cd172cce3a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cc6402-881f-4f8a-9db1-6ea12123d7b3", "sighting_of_ref": "indicator--57d062c9-38f0-46c3-9485-a2dacb3f3cc5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe44300-73fd-4b01-b685-8adf7ffc8aab", "sighting_of_ref": "indicator--f2169c5e-ef19-4efd-99a0-d9e3cc5cab41", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30357dd5-c486-4f59-a83b-aa35fff1bf5d", "sighting_of_ref": "indicator--6c93929e-d100-4273-8442-b45d398aad4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04857d2d-a4b1-475a-a0f3-edcd4ab12cb4", "sighting_of_ref": "indicator--503618d9-89ca-4f69-b8a9-9cb94223ca45", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64876658-7e95-4635-b55a-f15cba011480", "sighting_of_ref": "indicator--f12cf975-0714-40b6-bc0b-10c971455d16", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc28b50-e93c-4e09-a7db-cdb2a5606884", "sighting_of_ref": "indicator--7a19da28-350c-45d8-a7b0-a4f5d8d602b6", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f42c70a-77ab-42f7-9dfc-09f8ed0d0ddf", "sighting_of_ref": "indicator--173c8753-f61c-420d-bb5b-eb960896a363", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c75527-3dbd-48ef-8598-72438b435259", "sighting_of_ref": "indicator--fb06e293-97ec-4ba4-930d-85b0edf8d4fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c4c443-509f-459d-9401-d4e05846332b", "sighting_of_ref": "indicator--4e5718c5-3d3a-4f91-8f14-41bf343aab2d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3df617-f8b3-4170-b92f-fd772f1604b2", "sighting_of_ref": "indicator--c6eb75b1-b454-490a-801b-368036c98817", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9f8ae7-b5fb-4f77-9df7-2599315a746b", "sighting_of_ref": "indicator--55f30e74-e3ec-4766-acbb-22414d937b85", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59bb4e0d-f87e-46bf-9d67-f6bec15f283e", "sighting_of_ref": "indicator--99409d74-ae4d-4fb0-bb9d-9355d423d37c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cd8ca1-9d3a-4a5c-8193-ede28b548929", "sighting_of_ref": "indicator--f2e3c044-481c-432b-9f50-cf97444a08d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cadada76-83d5-488f-8c5c-257a6a4febd7", "sighting_of_ref": "indicator--23651e9c-d650-473a-b866-43c6693a74f1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01420c6f-09c6-4745-af2b-8f31eadb9579", "sighting_of_ref": "indicator--2ed41998-2aa4-481f-aa06-b5c3f521edfe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87299f1-4f4c-4345-b312-abc066bec0b7", "sighting_of_ref": "indicator--a48926bc-9287-4e1c-a87a-28670f65c51a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2bebb8-f86f-4d87-bbb2-d58cfc31ac24", "sighting_of_ref": "indicator--b823c0da-df6b-449f-9d53-3891ae36936b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801dc259-2bdc-4a97-bce7-61f6ef0542eb", "sighting_of_ref": "indicator--47285b4d-bbba-4d4a-b1d1-ab808c9fe68a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41bca9db-378f-489f-830f-02f2a3951c86", "sighting_of_ref": "indicator--fb55f4bc-f675-4a1e-8e74-3878804c2169", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e00d88-0a99-4218-aa1d-4b2438cacd9d", "sighting_of_ref": "indicator--bfa38ec3-68eb-4ba2-a977-258cad157e98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cef91d-5b97-426a-95a0-48938fd361f7", "sighting_of_ref": "indicator--0e003563-f178-45ef-8fb5-b9f47b61a8a3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0394cba-c793-40b5-b284-cf6dbbf88d62", "sighting_of_ref": "indicator--bf25988c-496b-4844-a336-21f8e825599e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f25983-cc7e-457d-9f24-7c45dbb084cb", "sighting_of_ref": "indicator--217498ba-3d84-403b-b08c-2c9c32eb92e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c41b96a-1b59-4e33-80c8-c94124aa8b96", "sighting_of_ref": "indicator--05d21233-693f-4cfc-9ef8-c8f9b1f4d962", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a202c6cd-7089-4079-be77-ba0e25bb6ea2", "sighting_of_ref": "indicator--a4ae805b-c912-4cba-88aa-24efc8a28eb5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a574abcf-8441-4b07-bafb-5a3e06c0083d", "sighting_of_ref": "indicator--51a21c7e-1752-4085-a729-7ebb1372116f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcb116c-8c26-4ab5-b2da-6e157fd103fe", "sighting_of_ref": "indicator--b7d6b8c1-1615-492e-8565-6aacb3c71a55", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4083b8-93af-4c54-b91a-cf1d6f77c88b", "sighting_of_ref": "indicator--1334d526-423c-45f8-b4c1-60a24f0ae071", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e508736d-e3e8-4ab9-9183-eceba72e42ee", "sighting_of_ref": "indicator--a42b5a27-d551-44b2-a91d-94976c8a20e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10108d48-e34d-4d53-a146-95deec5cbfe3", "sighting_of_ref": "indicator--c29bdeb6-8301-42e5-9a60-435271671715", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43982eb-eb5d-496a-a5f2-c3cacc5c73c5", "sighting_of_ref": "indicator--576fb7b9-97f4-4d65-a90d-f779fb9c1d91", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c7cd54-c1e6-45e4-a0b1-15030d080ca1", "sighting_of_ref": "indicator--84761f2e-6fd3-41b4-80af-37f44f652af7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be3e673-f0a3-47c2-aa91-79325a5c968e", "sighting_of_ref": "indicator--648db2c2-0019-4c84-a5f6-4c0728795d84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f484d7-957e-4e7c-9880-1f09841bbcb3", "sighting_of_ref": "indicator--c32d6cde-47f4-4551-9eb2-fd9b63d176e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f34963-0b2d-41b0-908f-1f6bb6d02ef1", "sighting_of_ref": "indicator--d2af8883-f68d-4d93-a738-7c538ae02dbb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4f7631-6107-43ad-b770-907f79eb21ab", "sighting_of_ref": "indicator--366d11a6-179b-422b-a6cf-e3cc8f557c6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fb7809-5f8c-4376-b97a-f5532bee5f3e", "sighting_of_ref": "indicator--03726ba3-dbe8-4854-9921-4add4262abfe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2123cab0-8edc-40a4-ba99-ca4783bb108f", "sighting_of_ref": "indicator--b1aa1c3c-a010-4ab8-98e4-fa88cd4adff6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6aca5d-1d4f-49c7-a8cf-13b88fada6fc", "sighting_of_ref": "indicator--9e6e1d18-ba66-4b55-8c19-370bc254bc72", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3c5b96-8760-4a8a-b78a-3efe5f8724bd", "sighting_of_ref": "indicator--6a471d8a-91ba-4d77-b9ed-dc81fc3c9da7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cb2a94-8933-4f79-82ec-d727a2d5acee", "sighting_of_ref": "indicator--e2bef328-2be9-4a2a-b046-0335b100f418", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--892e7f0b-1fbf-404e-9c3c-b95ec1c9f09b", "sighting_of_ref": "indicator--66be9979-e54c-4364-9158-e994fbf97b24", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99978175-4810-47a9-8b80-c70af77e65b2", "sighting_of_ref": "indicator--59a5a898-7353-4e8e-9c0e-dfd2452aea99", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33168fb-4aee-49d3-9648-4061972b7789", "sighting_of_ref": "indicator--0b1b94d3-f04c-49dc-a263-fe3634337d3d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae75e1f8-2499-4ce7-b129-3b45b979c92a", "sighting_of_ref": "indicator--36642ca4-3966-47d5-8bcc-9fd885ccf7b4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742b53fc-8574-4621-aa24-9d116e6bca26", "sighting_of_ref": "indicator--ac8c4f5d-b3d3-4b59-88c7-e588b9906850", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e270075b-f012-47f8-8271-ea8a78dedde5", "sighting_of_ref": "indicator--848d7ed8-eb6f-4468-997d-ff6f5acfa14c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf01bdd2-defc-4f64-8179-179b4d5d181f", "sighting_of_ref": "indicator--61a6e0ee-9ed6-494c-93c4-78d5e07271ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7182fa-03ea-451c-89f7-eb276b908a4c", "sighting_of_ref": "indicator--cc8ec4ca-7c05-4f69-9a2f-84fefff639a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d36feff-5aa4-4837-a8db-b92b6838dc4e", "sighting_of_ref": "indicator--9f7ce696-4dd9-4b47-942e-6c9a4154f8af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace2afcd-c2ab-4407-ba02-e01f9b2fae40", "sighting_of_ref": "indicator--7f4aea49-fe33-4b94-854d-85aee6a2f8ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1fe2c9-fd5f-4ae7-bce7-cab2f8c91919", "sighting_of_ref": "indicator--add95bd1-c9b6-49a9-a792-af1910fa0b76", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e663866-0e1b-444d-a7f2-a115b90c052d", "sighting_of_ref": "indicator--39f262f4-1454-42bd-b7c3-6b276d6bcdcb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b57d86-408f-4584-9ed8-9ef58bef18ff", "sighting_of_ref": "indicator--51cc607e-db12-4db6-a749-a1495eab4aae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3268cc31-64e5-43f4-86f8-e8bcf1db8451", "sighting_of_ref": "indicator--fbfdbbc1-5e09-4906-99e6-51a5ea203341", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15123f1a-e429-4af8-8fbe-b1f0c4031b5e", "sighting_of_ref": "indicator--be193b84-f793-4f0d-9d5d-a09136a3b308", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f610e9e5-4a91-4764-8f4e-186d034a414d", "sighting_of_ref": "indicator--d4cbdaaa-64a3-475f-a53b-64754cff89b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c04f57d-8c8b-4539-bf12-8cfc02275a1b", "sighting_of_ref": "indicator--66cf47d1-afc9-4da9-ace4-4dd760ec3b8e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c642b8-a596-4312-ad6a-4dc714b8c444", "sighting_of_ref": "indicator--d2a6b14e-95b7-46e9-85ce-7d2055833193", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e52407f-8c64-4c4e-8e51-e844a47dc219", "sighting_of_ref": "indicator--6fc1aace-b1ab-4903-8a26-058b039200c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214ef5e2-5959-42d6-91d0-fda558ae88ec", "sighting_of_ref": "indicator--5e187797-18b7-40b5-9613-29a5e1b0ac0a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2faf7d-107c-430e-a00e-db84c842cb15", "sighting_of_ref": "indicator--09930e24-b20b-4ec7-bf0a-af6bd34d304d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31a40ca-5359-4c94-906a-5ee84d969107", "sighting_of_ref": "indicator--021dc967-e116-45b3-957a-ed995ae4ddb1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dda8e7c-cd73-4996-b8d1-4b23c0ab921c", "sighting_of_ref": "indicator--7649010b-eda4-46e7-9598-bb844b0484a5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cdaf39-0505-47a6-a586-8c4e2f9126f1", "sighting_of_ref": "indicator--20d649d1-fdf3-4bf7-acd8-b882786b6b85", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919dfb39-5f53-459f-b41f-cb3631fe2162", "sighting_of_ref": "indicator--82613d5e-391b-4c04-a8ba-920d5e964f8d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93226de-3533-4dcb-a905-98711fcde082", "sighting_of_ref": "indicator--254168a7-e77c-40ad-ae57-ac096d9126ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd64e7d-c4d6-4a71-bbca-419d2b5b6fed", "sighting_of_ref": "indicator--95c17dd2-6935-4df3-851b-c824ef3dc6c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc8cf0d-34a7-4b86-bcc5-52427df2a6b5", "sighting_of_ref": "indicator--86bd5403-c4ce-4944-8007-7d4c2e520d6d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe92a198-e520-43b0-af47-3453245bf376", "sighting_of_ref": "indicator--c5615672-690e-4b25-956f-a7ae7f74edec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6179aecb-9cd8-4b89-9787-cbbcbaacc7bb", "sighting_of_ref": "indicator--8b56ad44-588b-4a6f-af31-a4503f2714df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4e8dd4-7ed7-4156-a913-cab731ed080a", "sighting_of_ref": "indicator--cd662e76-b760-4515-be0f-eb744a387fdc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1394fe-dd5c-4c88-bd8e-1882d2fe2a1b", "sighting_of_ref": "indicator--5fba791c-5abb-4dd4-a530-8b499a6d0c5c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966d7085-60bd-4921-9f00-7ff1fb157871", "sighting_of_ref": "indicator--59137821-29ce-41a1-b51b-9f31b9518486", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1510f402-6155-4286-8f50-b538505ffb67", "sighting_of_ref": "indicator--3537a8fb-b557-460a-bfa0-a65b837fbf4a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26306d78-8379-477d-84c8-85a12660390c", "sighting_of_ref": "indicator--00e6441c-7d33-4830-b15d-cb0b7f00c59b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00296638-878a-4d75-b7b0-ded6604e9f6a", "sighting_of_ref": "indicator--2bf97afa-e611-4a11-bd6a-7da6a51f0a6e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4786ae09-f2d6-44a6-b347-1b10d9b0040b", "sighting_of_ref": "indicator--576a9ecc-c197-4ab4-acab-0f45d5d0fbe0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcc1e6f-102b-40b7-be15-8b5e0889ecdc", "sighting_of_ref": "indicator--7dbff4b8-9d9e-4f2b-97da-8e23c18513be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31342423-27ba-43b6-9c37-4881d849b6d6", "sighting_of_ref": "indicator--848910c9-c95f-444a-ac86-4f31889ca198", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23fd5cb8-18e5-4fe0-91e1-d8f6b42f0135", "sighting_of_ref": "indicator--830cfcae-c110-43ac-bf03-f2555e6a38e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25570775-2f32-41eb-a476-99f8326d9ca7", "sighting_of_ref": "indicator--a9240d85-917a-49f1-976b-3951e3e7f29a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8be30cb-1d4d-4c3a-8ed3-c1ffa8d77407", "sighting_of_ref": "indicator--e7bf3c66-7493-42e4-bfe1-9216e0fbae4a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4693f0-d0ea-4dfe-b60a-2dcff0c271ab", "sighting_of_ref": "indicator--339ffd1d-fef9-4f02-b2d5-3d496954d1f1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1075249-e5b0-478b-8fcf-bae0c32ef03d", "sighting_of_ref": "indicator--638a409d-c1a6-489b-b8ab-c7249c900a7c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8de316-d198-433c-924d-89bf820c68fa", "sighting_of_ref": "indicator--08e3405c-d89c-40d3-8d52-61091af9d7e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d2cdb2-032f-43f1-8742-4a09bcad0632", "sighting_of_ref": "indicator--625e3f09-2759-4a34-9de6-a32788e1e01a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f717a5b-d957-4c6e-ac30-2b3c1debc922", "sighting_of_ref": "indicator--f5abda18-e15c-4db3-b989-6dda49892663", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2792962-b74e-485d-8f7c-9e72a7dc4cdc", "sighting_of_ref": "indicator--af906d57-4475-41a1-99e4-33345ab03c8a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffba810-4829-4f00-a0fd-c603d80851e3", "sighting_of_ref": "indicator--7b9de79f-124e-42d4-a3ac-23a3d9b088b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22857e38-88cb-4d29-a656-e5c42d0bf2a5", "sighting_of_ref": "indicator--8c14617a-aadc-4f31-b4ea-90383361ad88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e79f08-7fd8-4f1c-8d51-165f8c3882a7", "sighting_of_ref": "indicator--0c045423-fb8b-47d9-a028-aeda44c1b798", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1649936a-0244-4cf1-8c66-c5dbf07f416f", "sighting_of_ref": "indicator--c418a968-1d52-49fc-b7b1-8e9f269ba3fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda49b14-8c73-4501-97db-baf68ca31e42", "sighting_of_ref": "indicator--84ce2a47-9f8f-42fe-b0c2-f2ef256d3fd3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444b706c-b7ce-4181-9078-54025abd7d17", "sighting_of_ref": "indicator--49619c19-8d54-459f-ad6c-fbccb0db4ae1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221a1e28-12cc-4710-9183-e17ed2cf45c2", "sighting_of_ref": "indicator--61c80bfb-5c3c-4ae5-984e-667bf75bf37d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4a1a72-a272-4b5a-a306-710e09137fdb", "sighting_of_ref": "indicator--130f2fd9-8a83-48eb-bf10-1d6d4dfbacbb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58e48b3-c566-4ae6-a368-18f8bf9b0736", "sighting_of_ref": "indicator--47f90995-0b6d-41cc-8361-2b85134f6764", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721ca17d-94a8-44c3-9acf-aed2d6b4485f", "sighting_of_ref": "indicator--988c11da-2a1b-4914-888e-caea79f94298", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b69f74-9b66-400e-985b-b3fee0f7bb30", "sighting_of_ref": "indicator--1fa8084b-3e09-442e-8ec9-77c4ed231221", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54310339-b2da-4f99-9086-84bbb41c6c64", "sighting_of_ref": "indicator--a96c8824-7294-44e5-86d6-3c9dbde85f1e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b30012c-4761-4e21-8b23-823142cc666a", "sighting_of_ref": "indicator--949a249d-7bb7-40c6-a890-78be03ac1bdc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4db0f71-a091-4ab1-973b-36466ee5ef10", "sighting_of_ref": "indicator--47e4141f-de2c-4042-9b75-cf6bbbd2ad2b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74fcaf63-5b8e-4a75-bc79-343d72e0bb5d", "sighting_of_ref": "indicator--1cafe84a-b91a-4624-8443-da13986c0862", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472408dd-fa4f-49fb-9e5b-5c449cbfff81", "sighting_of_ref": "indicator--a26bc230-24c4-4eee-addb-970e4451b137", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7621e90-3130-4afe-bcb2-7e19987039b4", "sighting_of_ref": "indicator--11b35eba-b143-4aa3-850f-fb55c71d9c4c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a011d8-7d95-4190-86ee-82c440a99d76", "sighting_of_ref": "indicator--ca029a41-cc13-4ce8-8fb2-47c4ecabaa7e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31602739-537f-4d6a-8254-ab5cb570c7e6", "sighting_of_ref": "indicator--cc30826b-5a1c-4091-8f78-45b4492d9c57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e90cd9-b3e5-424b-8bfd-ead1a037832f", "sighting_of_ref": "indicator--f38768c3-08f3-4012-a1d5-bea05d91e81a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511e41a6-59a3-4fd1-ac0b-e4a5529ee413", "sighting_of_ref": "indicator--8afbb245-4d96-4f9b-8efd-cca567416eda", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3696c3-e3ed-49ef-8be7-a1c3782041f2", "sighting_of_ref": "indicator--fab8ac52-aa5e-45d2-b633-ea4bb513d630", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa2001-17d2-42c8-8244-90ef07ede92e", "sighting_of_ref": "indicator--2e3e8f0c-6231-4537-b977-93f9de934f26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001bd08e-ba6e-435e-9ee5-fb6828f5f39e", "sighting_of_ref": "indicator--cbc3792e-d0b3-4381-8ad5-9973be0566cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccc6efe-9115-4f63-aeff-a50b3b4a3914", "sighting_of_ref": "indicator--7ce338e8-f10e-4e06-80cc-1c6bf5a922e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff19b24-9b4c-4a21-9b72-4c7a627910c2", "sighting_of_ref": "indicator--1d5b4bcd-8d42-41ab-b851-5b967347368d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9b340e-3241-4e16-966d-dec49245a026", "sighting_of_ref": "indicator--e55c82b8-ed1f-4b1d-908f-4fc0e1e56370", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fa3bae-873a-45a3-8209-31e619162815", "sighting_of_ref": "indicator--bf15542f-650b-464e-9dbd-89d88656b8e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17e2266-b7d0-42e6-acae-8260bf265adc", "sighting_of_ref": "indicator--4e2827b0-5ade-493a-80e1-30b0e5523b42", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f95e67-1dd3-45ac-ad9e-c428ceb18dff", "sighting_of_ref": "indicator--e228fbbc-002c-48ce-aae1-f17f36d72829", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d846cb8-d4ad-4d49-a05a-e99c524c1452", "sighting_of_ref": "indicator--aab71595-8773-42fa-bb08-1305e8c5cf76", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a2a283-aabc-4e93-b0a2-7cf6a0f3dabc", "sighting_of_ref": "indicator--b87dd2a0-fcd3-423a-94aa-10c09d0d5f5b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041f0798-7f38-475c-8d64-4cdf0114d319", "sighting_of_ref": "indicator--ec196592-639f-4c4c-aa85-a828959d3153", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4e6d38-8aef-4b43-a4b0-8823a6840b3b", "sighting_of_ref": "indicator--5523ca9a-8931-48d4-a535-85ad14c6f4be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b8d705-3166-4971-beeb-da7c997553f6", "sighting_of_ref": "indicator--b2f9c457-973b-49c8-b7e2-6e4211f0be3c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e77380-f23a-44fd-82fb-263079bc8c4d", "sighting_of_ref": "indicator--c17eea20-2495-410d-98eb-1177848309a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f56da8-d815-4552-9340-58e3d72cf106", "sighting_of_ref": "indicator--2cdc4163-6eab-4fb9-9af8-68d92728bb70", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2d0b490-fc5e-4a94-8319-c661e6cd5900", "sighting_of_ref": "indicator--fcad9909-51fc-4d0e-8fed-60ae3567c780", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79c033b-42aa-4ffd-bb0e-f0c520a206d5", "sighting_of_ref": "indicator--57708097-6bb3-4131-9ac4-42382d7e823e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b179a8f-0ba6-4557-b097-dda2c20b0b6c", "sighting_of_ref": "indicator--1b8b639d-e7be-4861-8318-fbf6c5ef779f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5605a837-f002-4276-b0db-fef7cb730545", "sighting_of_ref": "indicator--de8256b5-0750-4622-88a0-53e5990d4ebb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4cf2d0-9325-4867-ad13-9be30dfe3c21", "sighting_of_ref": "indicator--515f0281-b43d-4f6f-a9f4-f1954ecb1aa8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c13a42-a91b-458a-a739-554ae16063e1", "sighting_of_ref": "indicator--e489543e-7bb4-4e85-9420-a549f594549f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0799af-7bd3-41ca-a90c-9035fa017922", "sighting_of_ref": "indicator--445ee74c-447c-4a36-9e65-36153d5e8e3b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8123a4c-1a00-4585-996f-91c5fb49c8a6", "sighting_of_ref": "indicator--72ff2148-0f16-4af3-8004-10bc868634b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c480c335-bf08-4d10-bd4f-24c508282721", "sighting_of_ref": "indicator--f0dc9aa5-8c6d-43e7-8620-0c5fa4c9a374", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4152d71-37e9-4e46-a042-2a2ed75a17cb", "sighting_of_ref": "indicator--13024439-ce42-49ac-ab1f-bb727548f317", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70cfeaa6-766e-4ac2-a92f-1b0fe8f5c48b", "sighting_of_ref": "indicator--4ffb3c2f-725d-46a5-b8dc-eda5858b7e18", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a86255a-b1b0-4c66-8698-d56fdd5f40ce", "sighting_of_ref": "indicator--f8808bf7-78eb-4f42-abc2-e4ba15d9fe30", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c9b297-1445-4418-9c1c-07c157e88f5d", "sighting_of_ref": "indicator--6e886865-fd60-44d5-81df-0f92ecc3d7b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4bfbe2-a57b-4fa1-922b-68556f1da96f", "sighting_of_ref": "indicator--65f0d193-b816-480b-90c5-2c47fec3f109", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737b884f-6ffb-48d7-bea9-a11da3508cf9", "sighting_of_ref": "indicator--74f8b3a7-8a54-44de-aea1-df9b88556c3e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925cfc0b-978f-441d-ba27-109768c2302d", "sighting_of_ref": "indicator--45c4b491-cdc6-47ef-86ae-abb0e8ed835b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce87603-73e3-4349-84e7-7bce3cbb146b", "sighting_of_ref": "indicator--43afb512-973d-4b3a-b252-3a85dae4e0ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11c3e4f-aa43-4b85-832a-2a43eb93c1bf", "sighting_of_ref": "indicator--43afb512-973d-4b3a-b252-3a85dae4e0ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--563f6200-2c56-488d-952d-3746e75f466e", "sighting_of_ref": "indicator--43afb512-973d-4b3a-b252-3a85dae4e0ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca1ca0e-8aa5-4e8f-8a56-ad4bdbac066d", "sighting_of_ref": "indicator--bc5e88aa-3f11-4e52-88b4-5f56fc03983e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046b8750-1093-43ee-8add-102e510fe271", "sighting_of_ref": "indicator--e2ade6fd-2928-47cd-970e-5d8f3c8ead63", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1fd95c-474f-4d24-8c1a-7bc5cd880989", "sighting_of_ref": "indicator--90218ae8-7d02-4fde-b3c1-754c153e0d53", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca89c4c-1500-4f92-915b-0c365eac41d3", "sighting_of_ref": "indicator--a9f01be5-e4d1-4b3f-9028-92ae33df3cce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12e5e0f-d543-4766-a03e-e8a08c19aafe", "sighting_of_ref": "indicator--84e30ed1-a963-4cfb-bdf2-4f070d7393c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474a3ce5-be3e-4c28-9de5-0e1350566143", "sighting_of_ref": "indicator--9c644bab-6642-414e-826e-37c6e152d9dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e8a871-b545-43cd-a20a-952904e8e337", "sighting_of_ref": "indicator--b5f55808-54e1-468a-bf6b-a2d961aa949b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c636bf8-a239-4153-8894-b9f3d0ca8ecb", "sighting_of_ref": "indicator--7d77f459-43b5-467b-8785-3990f7e51e9f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde867af-3a20-4910-9928-30408feabcb2", "sighting_of_ref": "indicator--3ef7b6a8-801c-471f-a76e-7ddb684fa87f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773938d6-7e2b-42d5-b0e5-548fcdd4d16a", "sighting_of_ref": "indicator--3b8efba8-c58a-40f6-91d0-73df3ac97ce1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a8bea9-5cfe-4c66-99e0-3de856a0414a", "sighting_of_ref": "indicator--cfe77af1-098c-48bc-9310-8a9d5ebcb03c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8175f6ae-616a-4afb-926d-f0626f717403", "sighting_of_ref": "indicator--48a642f5-04e9-4aa4-8845-0bd5ac09671f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885208ea-27be-44da-8898-ef5cd5834c9e", "sighting_of_ref": "indicator--7d775f9f-a656-4b6c-9de6-2f499623b54e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d848a8-a589-4191-88ac-978d42b24001", "sighting_of_ref": "indicator--df56fba2-5bb8-456d-9e50-0dd792b22735", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384f2b39-a45a-4e4f-a452-fcd0ff5bb997", "sighting_of_ref": "indicator--b8a30ad3-bc5b-49e8-afe7-8184bce17e5e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7958e9-c940-45fa-a017-11db4d14cad9", "sighting_of_ref": "indicator--acb31541-a92f-4837-8e43-9d31ab3b2d56", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370891e5-9399-4e36-a57f-e139adfb2647", "sighting_of_ref": "indicator--2e3d04d5-ee4a-4e36-bcb5-ad2ed2d50757", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f47d67-f789-44c3-ae74-25ee3557c272", "sighting_of_ref": "indicator--1054518e-4618-4dc6-bec5-aca513fc9a5b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76610920-cc67-4cdd-9614-3d2cd36bf2db", "sighting_of_ref": "indicator--750fbbbf-f6d5-4bbb-98ce-756ef10cd387", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127fd279-6686-47b4-8823-86b7d25209ad", "sighting_of_ref": "indicator--68dee526-b888-4699-a4fd-cbe507a866e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0858bac-b109-4c23-ae1a-71704f7784ad", "sighting_of_ref": "indicator--175d6dde-f883-4d55-b99b-dac802d2776d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d126f10-28c9-4bcf-8834-b4f347ff556f", "sighting_of_ref": "indicator--026e8469-8c17-407a-8171-84d2fef427a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d08f49-268c-45b6-8d2a-20d28cab3c74", "sighting_of_ref": "indicator--082712f2-410b-49fb-bc8d-b5d08639fd7e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1828f3-1fe4-400f-87ab-f4b41cd1de24", "sighting_of_ref": "indicator--a87f2a2f-12e0-4867-b216-cea32b6220e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded1b30c-1413-4482-8591-559693453384", "sighting_of_ref": "indicator--0e127325-bc12-4275-b646-ba332a23460f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659d5f4e-5b2b-477d-8e24-f9c141bda518", "sighting_of_ref": "indicator--be764126-4ed4-4a9b-91d0-c8363e9bc4fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8797f9d9-5097-431a-9488-1327caf9b297", "sighting_of_ref": "indicator--26a0b82e-b62f-42fa-8ade-56bf680582ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06c7601-3534-48d0-ba43-6a06a239ba67", "sighting_of_ref": "indicator--572e07e8-d7df-475b-bc99-a29c1c68b20f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fea02f-6108-4e6f-8b04-ba2a855c4a28", "sighting_of_ref": "indicator--b9b232f8-d6f0-4815-a0df-043016901c39", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc63af00-9e7a-4524-ac40-ae396328c35c", "sighting_of_ref": "indicator--30881315-0646-46d9-ae53-c8944bf668bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3461b6e0-ded3-4520-9313-68f3edf100bb", "sighting_of_ref": "indicator--e08093bb-55e8-4005-859c-824d791914e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e943ef71-980f-4858-b0a3-cc90e5567776", "sighting_of_ref": "indicator--e08093bb-55e8-4005-859c-824d791914e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5c4d9f-907f-44ed-8f1f-5afb98bcd734", "sighting_of_ref": "indicator--2efadae8-ae1e-408c-8a00-bfc731c4a08e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce92cdd-2b15-4915-8da7-4a4e0ca46dc8", "sighting_of_ref": "indicator--6a8e96c7-a875-4bad-a662-9adffb130c05", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03b151d-a30a-4cf2-88bb-ab2a6a7e2ad9", "sighting_of_ref": "indicator--38ab5f5f-dbf8-46ab-843f-330a9685fe7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4ef6cf-691f-4e3f-a49d-1a5691698868", "sighting_of_ref": "indicator--54b2cac2-f262-42dc-817f-dcb91a4a9084", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d210be2-4f2d-4cc9-8f5b-d181e6962ec5", "sighting_of_ref": "indicator--54b2cac2-f262-42dc-817f-dcb91a4a9084", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc7cd94-addc-49da-b298-87c66b2fa054", "sighting_of_ref": "indicator--04d91b9e-8288-4415-a305-cb9e8e62b085", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470f2482-05df-4d2b-9325-396887825d9f", "sighting_of_ref": "indicator--587292bb-b12c-483e-858c-1944524a60af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f822f6-9743-46c7-bc82-4a6614e0f135", "sighting_of_ref": "indicator--75b8d6fe-e326-4965-aec9-947521d596c7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486efa50-d2e3-40e9-b9ed-4b39ea0d853f", "sighting_of_ref": "indicator--75b8d6fe-e326-4965-aec9-947521d596c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c540e1-3610-4a96-aea2-d6aaf2f63717", "sighting_of_ref": "indicator--b93ba38c-d235-4c0b-b21f-b14fa95b5a36", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c434d6-aaf5-491e-88af-06a754ecbc17", "sighting_of_ref": "indicator--e8e7fb63-08b4-45a1-bac6-ede1bac6c854", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d383a3-47e5-4f52-82ae-4bff4a6cd637", "sighting_of_ref": "indicator--e5cc2ad8-fedc-4d13-b475-be7ef09d0c5a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecc3562-8f4d-4043-a1e9-f76bf46dea74", "sighting_of_ref": "indicator--f97f10f7-5c7b-4371-96ec-c9a4c49e12a5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f940a5-58c1-4494-8b23-89a5e13ab776", "sighting_of_ref": "indicator--4c5b78f6-0764-473e-ba9c-b483b047a757", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39772662-3c55-42e7-8224-dc8685f1890d", "sighting_of_ref": "indicator--6e1e58ee-0f79-4e49-9a69-76dd2b75cef4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8947a66-bd1c-4b85-bcc9-d2c6911d1576", "sighting_of_ref": "indicator--a8bbe3de-f334-409c-b666-8eef1b822542", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e22435-6991-4649-917e-d52f1f0d4ba3", "sighting_of_ref": "indicator--46723b8d-96ae-488e-9ff8-fd2dc4c68276", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37baae34-9040-4543-b253-cb785f49bbf8", "sighting_of_ref": "indicator--cb17512e-3674-4f58-a320-a50606587656", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f55e1b3-9d13-43f0-b781-e75d277b3f0d", "sighting_of_ref": "indicator--ead0588c-c40e-4bac-a106-9b8ae45ce153", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d136367-f1bd-4157-b217-47744e47b3d4", "sighting_of_ref": "indicator--43a6410d-e651-49a5-8bea-1d10f93b1bf4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926adeed-80ed-4ce1-90e5-09066917758e", "sighting_of_ref": "indicator--c822ab29-7dd8-48af-80f9-75bbdc7501e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69565b96-d407-4a58-863b-8fedac7cc6a4", "sighting_of_ref": "indicator--5d6680f3-6c2e-4da8-9207-22b66434e337", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040a45a3-46b6-4f4d-8c6e-018115da63bb", "sighting_of_ref": "indicator--cb2929d8-a9d2-4dd4-9b2c-dd075e7d3f9c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2506f9f3-551e-47e8-8d53-43652505245a", "sighting_of_ref": "indicator--ca9f8c3f-fe75-4b1e-a958-85894a62da4b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aabd4b8-610f-4d22-9bd8-e4cb7189815b", "sighting_of_ref": "indicator--09a89e73-44f7-4e9b-b23d-c5daf85e0e09", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0278c7d-903a-4835-9301-d8c35a82dd0a", "sighting_of_ref": "indicator--8bea5dec-9c0f-4e98-99dd-a4ad4a4bce84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e139b1-d3fa-4615-93e3-88753e9f7f45", "sighting_of_ref": "indicator--42e90760-293d-4eb3-b4f0-ba54e524177d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8727d386-3c47-4c92-98b3-bac8d51c0a58", "sighting_of_ref": "indicator--ac2a3053-6c3a-4a1f-8085-fdcdcdde3ae4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e551d288-97b4-4ba1-8a42-a8c978e0784a", "sighting_of_ref": "indicator--d63e8377-bb5e-4f1e-bbef-8cf945ef0dc3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4cf026-7c6d-4f2e-aba7-9effaf61af3d", "sighting_of_ref": "indicator--204cda88-fc6d-4f6d-9c3e-ac5da2b25649", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb6bd98-e014-4891-b8e3-4dd3f78bcaea", "sighting_of_ref": "indicator--8286fa7b-6cb0-4044-818c-d4d634974f56", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c477ce1-77bb-4d05-a45c-db491ed3cc77", "sighting_of_ref": "indicator--b156f263-0a78-4ff7-8063-e8d421952317", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1403362e-73b3-41fd-8333-26d699cc489a", "sighting_of_ref": "indicator--705f354e-b01a-42ab-b6a7-9f3d8f3be4ee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30abdb8f-45fa-4c28-8208-b4c12a0a9c82", "sighting_of_ref": "indicator--a15a7568-1afb-4a3c-9807-6e45a50bfa00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe75d2f-abd4-4f9a-a62e-d3a415b4409f", "sighting_of_ref": "indicator--acaf48c5-e32b-423d-b3f9-a38197e052f6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d013a893-131c-44b7-a114-c1dbd907f59b", "sighting_of_ref": "indicator--8378379b-f92e-4a5b-b8d4-2cc88e68ccf6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93598bfb-1a04-4b7c-bb98-9e6355ac3d6d", "sighting_of_ref": "indicator--942c5af9-2fd3-47be-9560-67682e6f8b1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090a827c-8446-4b25-b28d-dbe236570706", "sighting_of_ref": "indicator--2866fe38-357c-4635-a21e-96c83ebd0bc8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d0c2ad-169f-4a09-9334-013e76855190", "sighting_of_ref": "indicator--a8af0081-a434-4532-aecb-599d12409841", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc35b16-edc1-40a0-8b1b-542aed874853", "sighting_of_ref": "indicator--9826c81b-cc47-442a-a94b-6bee0c0f4acc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c741d68-72ad-4d48-86e3-bcd2d4802228", "sighting_of_ref": "indicator--bc706f01-2f27-4a6f-bbce-3c40aa9db50a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fb819b-ddfd-4259-9fc8-c076074b1fe4", "sighting_of_ref": "indicator--970f97ed-c627-4b5c-98ea-8117be2ba7e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031f0c21-b4c5-4f8e-be7a-9c47a0e20aa8", "sighting_of_ref": "indicator--2170d998-79cf-4fcf-9f67-ba1ff92b6124", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b917378-702c-4377-b3e2-d072ee641177", "sighting_of_ref": "indicator--6e7c9f4e-c690-440d-b1ef-0a08fa491ff0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d62076-160b-48fd-89a5-4a41633a89ad", "sighting_of_ref": "indicator--d5f1abb2-8e7a-4a8f-a370-18d48f9fca41", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc71377-e214-4fe2-99cc-75b331f1e415", "sighting_of_ref": "indicator--e730375b-cdf2-4507-a755-554779cc0407", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9caf1d3-2e7b-4916-9151-4f04278438b7", "sighting_of_ref": "indicator--0827a1e5-b17d-489b-86a6-2a61092d1e53", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78ffc29-55f0-4357-a59a-29e6ebacf757", "sighting_of_ref": "indicator--cd1e82f9-4139-4e14-b227-48015ebb3c8d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d311c6-b87f-4df8-9b90-3fa8e202e2d9", "sighting_of_ref": "indicator--ca79987a-941e-45b5-b9f4-2e6195995378", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71299bf4-7fa3-4347-9e80-6d05379b3500", "sighting_of_ref": "indicator--9d0a0493-25fc-4efe-9b60-c60c324d8914", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9e728a-3267-4b88-a095-6d5913de1234", "sighting_of_ref": "indicator--f243a668-2eb5-494b-935c-ba1bb58599c6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da87d8ad-ab42-4bd3-ad98-0bd25b6517f1", "sighting_of_ref": "indicator--39e235f2-0a5e-472f-8cd9-f6e3b628636c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b089ef-3f89-44c2-80df-53c92b362ed8", "sighting_of_ref": "indicator--62b34434-fa2d-4b28-9a48-452cab8c0bb1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2f939c-73f5-44cc-bd7f-c526eddd0c01", "sighting_of_ref": "indicator--809ef655-0214-4f92-83d0-e50adf70bdea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb53ddab-f913-4d31-b1d7-b341128c0fe8", "sighting_of_ref": "indicator--aa9eb387-b39f-43ef-a771-763d20ea2b8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc2b53f-9fcd-41ca-afa1-9e8a70027da3", "sighting_of_ref": "indicator--efc307b4-5d9d-400d-a857-66be4986a6ee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a09446-97e3-4e00-9269-d4f25bd1f11d", "sighting_of_ref": "indicator--daaaee88-507b-471b-a38e-85b8ba863e8c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d43cb1d-ddf8-405c-8c2f-8ab2a2635451", "sighting_of_ref": "indicator--13f834a6-02d2-4988-9733-fd731b3f9175", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a848fc11-f7d9-4cbc-8df4-2f748c23f86b", "sighting_of_ref": "indicator--797e2019-1477-47c5-8908-4322e25ccf50", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7252bb4-ae6f-4d80-a7f6-e9941d464097", "sighting_of_ref": "indicator--7022674b-5be9-4308-9360-c648e5d42230", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79831503-d18e-4b9b-aa06-acef6777beda", "sighting_of_ref": "indicator--7ee15e65-2d8a-444c-bd5f-48c3dcc8d633", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b199123-d58f-4397-a6c6-607f24b9415d", "sighting_of_ref": "indicator--d70c7c46-9d0b-4c37-806b-a0d86caac1ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff6c7eb-ebf5-499d-8623-d2f9e70ca1fd", "sighting_of_ref": "indicator--dd2d146c-efc3-4602-94e2-6d2390727730", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f185555-3fe6-4979-89ff-e0f06bd27fbf", "sighting_of_ref": "indicator--2b9696c5-921e-404d-890e-9fb59067276b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87433c0d-6f36-4069-a2ca-3f4614b2b5e8", "sighting_of_ref": "indicator--90876baf-e006-4c09-819b-90309bf3eb2e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c369f3a-01f7-44a2-9e01-c87eb7453f0a", "sighting_of_ref": "indicator--2fa281d7-946f-46a9-be77-23d98b6c292c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05a950c-9ea4-4c6b-8549-f390c73be5ac", "sighting_of_ref": "indicator--dccda333-46a4-4f8f-80e5-8c96d64d8930", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec08d39-c052-44b0-9a75-55fd707e5336", "sighting_of_ref": "indicator--7a6a4ebe-7738-4f86-9d3c-1288c8d9e17a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d48444b-11dc-4fad-a335-7825ee134009", "sighting_of_ref": "indicator--2ab54783-34ea-4b2a-91b3-8ed17287462a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff53e31-3616-4274-a279-05b28b74fb3f", "sighting_of_ref": "indicator--15feed0d-bf35-43c2-a7ad-494018e7c9fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733ce91d-5022-4b9f-bfcb-a7beee418479", "sighting_of_ref": "indicator--939b7ad5-ef0c-4cf4-bb54-e1fa5f73911e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0eae032-6fcc-4770-9717-8cc5c0d3a3de", "sighting_of_ref": "indicator--e5596dce-9ea7-4dde-92fd-f57391853a6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abce447e-1fb6-424d-8911-4b053fb787fc", "sighting_of_ref": "indicator--a7da347a-70d4-45f1-b20f-2dd882e2e819", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9aee05b-b1e9-4d72-bcd2-c7beb049e5ff", "sighting_of_ref": "indicator--dbd52a24-ed7e-4cfb-a69a-8413f97b7156", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2494565d-d272-4f1c-95ce-d860ca9a476a", "sighting_of_ref": "indicator--36207ba7-958f-460a-950e-6a246fac9560", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1485cebf-692a-4f05-8f04-895d1a6a5c7d", "sighting_of_ref": "indicator--c16b7edc-dd42-427d-a734-ea8b2858364b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f40c036-bbbc-47c9-a241-9338cf2c8e71", "sighting_of_ref": "indicator--4ba6ca9b-9f77-46c3-b332-9b2d4b0ba15a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c5e092-7643-429d-ba21-d75ce68631ca", "sighting_of_ref": "indicator--d96590e4-4d72-436e-9afb-8a70acd7e4de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--519c38b1-cb1e-4677-8527-1bd744de2fbd", "sighting_of_ref": "indicator--3d0c9d4a-fb00-44dd-9f1f-2e702cd47e87", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213d6c30-badd-4b15-896c-ea3342e7761a", "sighting_of_ref": "indicator--d39c161f-10cc-46e6-ba0b-51b78722aacf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f2f7f17-9a35-4fe9-b2eb-2b8ce96fccc2", "sighting_of_ref": "indicator--68604023-bdf9-4267-a70f-57b068ed95e3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97fb672-a255-4964-8c47-2d9d3243fb4d", "sighting_of_ref": "indicator--4047898e-a058-46d6-8397-ffeab0f1e772", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253a6f51-8eb5-4a97-b3a3-a8e107b8a63f", "sighting_of_ref": "indicator--c6a4b9ce-4aea-46fc-bb26-c4e164f601e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b780b2-1f1b-454a-b980-7640f0159c5b", "sighting_of_ref": "indicator--18a039f3-df95-48a2-baf8-eac7b0dd4e3c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d916e8b-8c22-48f8-8e64-96a9afdb5426", "sighting_of_ref": "indicator--90dd7354-1c4a-456d-9f31-675c27f02de8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c748f9d-0258-44fe-b87e-b8c61610af94", "sighting_of_ref": "indicator--e48454d5-3dfe-4c48-9c1c-891c38400560", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543b1bb1-ba03-4734-b856-b8a6ba1c0ea8", "sighting_of_ref": "indicator--99ce1041-1531-4893-a618-61a4cdcb084c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb23fcd-e8aa-43b2-abe8-ddd40a6e50d5", "sighting_of_ref": "indicator--1b074bd9-718c-4487-8e3c-3348744c1fca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a262e16-9a5f-4aaf-85d3-64421b2298dd", "sighting_of_ref": "indicator--03788473-4cf1-4244-b8a7-9b0ebfb36af1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f6ad8e-542e-4938-9db1-f12323d20110", "sighting_of_ref": "indicator--4e4b7218-01e0-4a38-a994-9fcbc6add9a5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f2a98b-7f8b-4c5b-ba96-feaaf93cb911", "sighting_of_ref": "indicator--d400e3ac-7638-4b79-b14f-c9d046c9ca05", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0468f730-dd8b-4fcc-8159-5c2f39761bf8", "sighting_of_ref": "indicator--597f8819-973b-4e96-a735-53ceaf5f8c65", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327ff784-1b61-436c-b5e7-8d0de4128568", "sighting_of_ref": "indicator--b24d858f-4024-448f-b7af-9083ba1c8773", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6267ec-23a3-4c61-9450-c3e18487962e", "sighting_of_ref": "indicator--86097be2-9c03-444c-a5cb-4fb4258881ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672a6375-c057-477f-82be-0968899cdf96", "sighting_of_ref": "indicator--82d4d840-9ee0-49f6-bf6e-c238fe8b2d8e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326dd7ad-2f34-4842-8429-9999e979c83c", "sighting_of_ref": "indicator--17feb1fd-0455-4e1f-93b1-223a92050545", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b733f5f6-2ea6-47e3-abc3-9e6ad6356a61", "sighting_of_ref": "indicator--dd1ccb72-d3fc-4238-bce1-e2eda13e7ed7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798d48c9-5f33-40e6-ade4-7d140c93f325", "sighting_of_ref": "indicator--734819bb-21ee-448b-924e-5aaebca66259", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b35d5ef-c86f-4b73-8bfd-fa00fee68f3e", "sighting_of_ref": "indicator--129b797b-029b-4fc3-84d1-2ec55fb3c7c6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4566975-be6d-45a1-a292-5b669556f237", "sighting_of_ref": "indicator--ee28d03e-d5ab-4ff2-bc6c-722749550f02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ba5977-f856-4ea3-96cb-fa3b83d6ade9", "sighting_of_ref": "indicator--8a692382-4868-4b9c-96e5-ff3b4f8b3353", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869ffac2-37d8-4fdd-b4fb-3d690f2bc3f4", "sighting_of_ref": "indicator--652563c7-0842-4ae5-aef8-6dfdaa43dfbf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e9ef58-ef3a-46bf-8cac-c564f71e640e", "sighting_of_ref": "indicator--6a75b0cf-b8f0-4d91-a5be-5815ef8e696d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d311ab-95f5-473b-9e79-4a9eee352519", "sighting_of_ref": "indicator--690cd7bf-b986-44d5-8227-1e2930e5e1ce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19aca77-d6cd-4963-a610-6ec203e01bed", "sighting_of_ref": "indicator--3b62a69d-6b86-4186-a7ba-a5badfebc259", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77905ac-5350-4df3-8a59-1b266119ee75", "sighting_of_ref": "indicator--d381f912-48de-4129-8641-c1abe59a1e94", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7ff20a-f851-4968-830e-4e20e7949a74", "sighting_of_ref": "indicator--639a4af7-e412-46b6-868c-a8b49136ab0e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17196c80-356e-4732-b1c6-22313d94ce13", "sighting_of_ref": "indicator--538129d7-7889-4646-bb51-657cb04b9229", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35c707c-c55b-4e69-85ae-be3da15a1371", "sighting_of_ref": "indicator--59e5cefb-e4e6-4abf-b5d9-c54fa8ff589b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d50fbf4-28d0-4d03-9620-39ea921c9aa6", "sighting_of_ref": "indicator--16574cc8-800a-4d5c-955b-70c958c730c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94ab00a-faf8-4d31-b1c5-973d3340bf85", "sighting_of_ref": "indicator--a959cbea-06b9-4c36-b948-aa4e78c12c74", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7437134-c71d-4e1c-844a-ae94bbcf5226", "sighting_of_ref": "indicator--a4af43c9-b158-4a44-a19c-a83b23e46d82", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0da580d-a55f-414c-9cf1-ef575c8d2fc8", "sighting_of_ref": "indicator--b67cec0b-5887-4aa8-95e3-4646c15e7a93", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd0accc-2372-474f-89e2-264ced65aee0", "sighting_of_ref": "indicator--1120d54b-5193-4095-a218-d4d43c978d61", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4859658d-8a46-480b-9329-1627c6bf885c", "sighting_of_ref": "indicator--a0addee8-6a6d-4cf8-806e-6d3432e9fb69", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fa726e-0d62-4172-a0ab-469d1ca4704d", "sighting_of_ref": "indicator--aa509435-46c2-40db-a40f-ad776c49d259", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b48cfb0-81e8-4f5b-8477-9f698874ffd1", "sighting_of_ref": "indicator--ec1b8865-c11e-4a23-a84b-a0666c7f67a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b5ffc0b-d263-495c-9566-6533ff692157", "sighting_of_ref": "indicator--0398f015-292c-456f-b00a-2d5a9c878dfc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f6b6e9-cbc1-45ce-9e29-8d9997842b81", "sighting_of_ref": "indicator--9ca899bd-b017-4720-aa67-fddea398806d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1653f5f9-938d-426c-babb-91a1adb2ead5", "sighting_of_ref": "indicator--8ba99a5b-2287-493b-8be7-09e9589b2bc6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1686d7-5caa-4e20-8c15-a101e73a8c5d", "sighting_of_ref": "indicator--5e953ff9-ed49-47ee-9e3a-448efe6396c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753c6165-3398-4552-92e9-9fe291182041", "sighting_of_ref": "indicator--a221e5f1-bd3e-4d77-9ef8-74cd27b8c366", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adb8ceb-190a-4568-8c65-d6dcaca5f7fd", "sighting_of_ref": "indicator--2a92585e-7c74-45cd-8219-b0cc129b4f17", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f1fa35-60f7-40e7-ac7d-ae99eedac3fc", "sighting_of_ref": "indicator--0ef8cd7d-0644-4674-a627-6a2a213a6b72", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6a3623-07bb-4ed1-9cd9-8667ff6b0575", "sighting_of_ref": "indicator--e02ceb51-a13e-4c74-bc7f-008c922e1f2e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e002146-6a9b-497d-b4dc-30b004b82fbf", "sighting_of_ref": "indicator--419e3327-5a2d-4543-9429-ae1d340d6730", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f34759-01d0-40ab-a04d-bf1c558941fd", "sighting_of_ref": "indicator--6e295ef9-05d1-4a52-a86d-c57e0539d1c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0519954-290f-404d-9441-a02c29aef23f", "sighting_of_ref": "indicator--6b9bc30d-7772-4af9-9b32-eb48bd229ec3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdd50fa-de22-458d-be2c-ac260820c932", "sighting_of_ref": "indicator--16e8efc7-b96f-49a9-9a81-8c61f1aece95", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634d794d-6da4-4c64-a559-2947513d0542", "sighting_of_ref": "indicator--8cfb2717-82ec-4fb4-81eb-6316e38568be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfd0f32-8e29-435a-a2a3-582bbf41a48b", "sighting_of_ref": "indicator--e104c633-36d3-49fb-a59a-19cac054ba32", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef9ae95-963a-4039-b27a-354540679b07", "sighting_of_ref": "indicator--f15db0e5-4fd0-4dc1-952e-ca74a619c953", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5cfdda-d1c9-491f-8cdd-83cf27ae2196", "sighting_of_ref": "indicator--569b61ef-1333-49aa-b6c3-f4e2a4c1a6f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9ae5ac-3c76-44c0-bd77-21d7c2b6db35", "sighting_of_ref": "indicator--e3728a53-80a0-481b-b99e-d0b810d70a6c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242ec833-8266-45b1-b94c-d4baae48e410", "sighting_of_ref": "indicator--f02668e3-ce28-4f11-8862-4eddc8924f11", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c8b9b5-4b3d-499c-b216-a1644b5d2405", "sighting_of_ref": "indicator--96a34eaf-8bb3-4419-9c4e-02bd7df7692f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b96d49a-5d45-49cd-b9b8-b438dc69c932", "sighting_of_ref": "indicator--5be6787e-f4c1-485d-9d83-5e9e998f61b4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2863f4d7-41b4-4068-b21a-cc45149c11cd", "sighting_of_ref": "indicator--a9bd34f4-b2ee-4ca0-b2a4-139cf0abfde0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d78a6b8-8a31-497f-afbc-086e17f4033b", "sighting_of_ref": "indicator--d6865633-0e36-41fc-9cd7-fa4313a037fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3715cb6-0fde-4bf4-ab5a-ea593a64b148", "sighting_of_ref": "indicator--39a714e5-d29a-43e9-a4b3-da915219495c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a043c188-b961-47a8-b501-58ac7b342a10", "sighting_of_ref": "indicator--62452ae8-6c10-49c4-a79c-24b13b6880c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568e3c84-8b46-4766-af9a-e622aeddf92d", "sighting_of_ref": "indicator--34bf3db7-59ad-422b-9f9f-49442f2efc4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78ca7ae-2664-44f5-9aee-157b41ca17c0", "sighting_of_ref": "indicator--9738dc8f-c976-47c1-a55b-4d1ed33ccf0f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da4e53b-a27b-47b9-8000-a6b11399d5ee", "sighting_of_ref": "indicator--4c6860e9-d8a8-4d31-8b26-69322763794a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79028ccc-f487-4a6f-b547-e1708d061dbd", "sighting_of_ref": "indicator--dbc8938c-d289-46ee-bb59-ae8e5b82f391", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee152c9d-4165-4111-b378-93d1bace59a2", "sighting_of_ref": "indicator--9eca6d75-055b-46cb-a978-bd19547239e3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d5e90e-25b2-4d51-8f43-89c657cdcd45", "sighting_of_ref": "indicator--c5f753bb-269c-4183-a37f-ff2586a7b9f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20494670-4ba7-40a9-913d-537754deedc2", "sighting_of_ref": "indicator--809293c0-15dc-42d8-9e93-72a2ea8aaa00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8ee6ab-4afc-4573-a7aa-d19c2b3a80d7", "sighting_of_ref": "indicator--d65f2db5-a5c9-49b3-b98d-1d636e84ec59", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7474731e-e1b3-4127-be95-b16731e93f8b", "sighting_of_ref": "indicator--f6d832db-3543-47ad-a6d7-38d88f8723ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be759ca-7536-47fd-84d2-402e579eab9f", "sighting_of_ref": "indicator--8c9c63a3-eea3-4d95-b72f-1e891a1ab39e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e305f83b-977b-44f8-8cf2-7ebdaedac869", "sighting_of_ref": "indicator--baf8d7ff-9405-48e9-a06f-9da7a93a1e43", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ab690b-69d8-43a4-875d-2d5052f2b3a6", "sighting_of_ref": "indicator--60f2b929-010b-4242-9685-0d7d32d63603", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1d29bd-a4f8-46f0-a45f-f452fbf9c3ce", "sighting_of_ref": "indicator--847eacbc-7535-406a-99d6-642dab872361", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09ea4e9-f4f2-4322-a534-07738a1577d5", "sighting_of_ref": "indicator--b5b881b5-7e62-4141-9352-f2b6b10f2894", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db154950-742b-4595-9fbf-94e66db3f9f1", "sighting_of_ref": "indicator--da77f2a0-ed11-4e3b-a05a-898058e70801", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfa6ff1-8282-44b2-9918-2158e22c0b07", "sighting_of_ref": "indicator--3ed7a867-604f-4aee-a84c-f937e0e1460b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2501f760-d96d-4d1a-b075-6d1d9c18f880", "sighting_of_ref": "indicator--a7b7188f-a142-4c59-8d1c-8d195f61995b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60197f77-4475-4eb4-af43-2167916a737b", "sighting_of_ref": "indicator--d75fab5b-12ab-404d-99ce-e1cd6e7f2d87", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b218575-94e5-47f8-a464-359f023e05ec", "sighting_of_ref": "indicator--9cd27340-bab2-44eb-aebf-8fec1c9d6c17", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b67bc373-f85e-4616-a3d1-5dcca2ad0758", "sighting_of_ref": "indicator--bd9448de-e36a-4306-94f8-61d0b1f0197f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b19f248-f4ea-43dd-af8a-c4de00be3c57", "sighting_of_ref": "indicator--435c94e9-5ed8-42cb-bffc-5324762944e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4042b408-1f07-42e0-a2b2-e7a090cd0280", "sighting_of_ref": "indicator--db81bed6-591e-4daf-823f-4f5a3fdf24e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22c5770-e924-4727-90b3-47dde1942014", "sighting_of_ref": "indicator--b1c88538-e3f4-4a3d-a9da-57eb032588fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0263ea00-af89-46d0-94a1-3677b8d59c20", "sighting_of_ref": "indicator--15a4ab5f-2280-4467-8abf-9fc88bd7b0aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbeca63a-a960-4e0f-aeb3-ceaf598b571f", "sighting_of_ref": "indicator--7f1886f7-8476-4ddd-9de2-ca6959e45762", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f356a9df-ebc8-4c57-8c20-09138f1af2d9", "sighting_of_ref": "indicator--c6c89750-2518-4d42-bcc9-29f8276db9bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e083a8-375f-46a5-8406-ddb5ecde9f9b", "sighting_of_ref": "indicator--1d56cd09-fafb-4f49-89a6-b40609aea1a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e2ec84-f5b7-4c2f-8453-9cf0d7fad3f5", "sighting_of_ref": "indicator--c3499bfd-176d-46ed-853e-5ba5c44e95c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361ef378-550d-4416-a635-987bda24d050", "sighting_of_ref": "indicator--4698c0e7-0d03-41f1-9dd6-a3be3bbda823", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef96e529-66cd-4c40-b909-3a874c41c64e", "sighting_of_ref": "indicator--976e545f-6703-4527-b955-338c29374cd1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b309ca-f6da-4fbe-bd19-dfee99131c8c", "sighting_of_ref": "indicator--9a8f45b5-231a-4bac-a863-95d55bedfb3c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf560041-f141-4bd4-ae2c-ccba8039c5a0", "sighting_of_ref": "indicator--5115a403-d882-4213-ae3e-bcff76887a7b", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b384f829-7cb9-4e93-8bc7-579e6c3ee4e8", "sighting_of_ref": "indicator--9745bea0-da28-4033-bdf8-ab25126bebb8", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a1bb86-7753-4511-b63a-a5083b9e67e6", "sighting_of_ref": "indicator--43d07cbc-2af3-4ec3-8ca6-8b89f737378a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fed507-ba42-426f-b7e6-6de3ee7808b6", "sighting_of_ref": "indicator--34cf22b6-f24f-4c2a-a42f-2f2bfce01acc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226c6cce-dd68-43d7-802d-1906e0e799e7", "sighting_of_ref": "indicator--52803cd0-1f99-42c0-8b10-e148fd7e50c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c200a9b-7e1e-41a6-8d2c-346fe15b03d5", "sighting_of_ref": "indicator--644bdf4b-7f2d-4d6a-adcf-c5d9ea082cd5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b739c6-bd3a-4b5a-8476-e9a0f74e8702", "sighting_of_ref": "indicator--ef82ff2a-ec6c-42a2-a0ca-8d5401770867", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e14d94-c9aa-49e1-8edc-714e7872acdd", "sighting_of_ref": "indicator--2fa21e03-8fa0-4056-a7c7-bb17fc9249ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf33ad40-b58f-42a9-ae1c-dcbc9c35d7c6", "sighting_of_ref": "indicator--4aac8bec-e911-4947-ab00-c81acd6045dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6193de2f-3681-4ee1-b297-d451c3888e7c", "sighting_of_ref": "indicator--a48b2659-ca1d-48f6-bf8a-2993789cd65f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7b1ac3-2b09-4601-a2ab-3820be43cb08", "sighting_of_ref": "indicator--468ec3b9-33d3-48b9-bcd1-25b473c5f55a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380e650a-c508-4d3c-a1ab-5890f5fb1277", "sighting_of_ref": "indicator--3d4e36f9-34ba-4995-a5e7-4526ec0fe40e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339936e5-286f-45ac-be50-2c150db286c0", "sighting_of_ref": "indicator--84afb20d-ae92-419c-b34d-84f1c7d20193", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daceaaba-87b2-4b2e-9064-6e373eb8d086", "sighting_of_ref": "indicator--a4da5564-3adb-4f31-a36d-4b5968bdb923", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8d55b4-8d59-4aa4-9050-f4564588289b", "sighting_of_ref": "indicator--33862a22-418b-4f6b-9de9-e8388f454ae6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30654fa-f74a-4f70-a253-1afc48187eea", "sighting_of_ref": "indicator--8d433081-3e3e-4cb7-b2e2-07b3d711afd7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f2e53a-18ee-4b14-8f3b-8291834bb55a", "sighting_of_ref": "indicator--d803a131-196d-4ea0-b869-c218960968a2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe050fd-30cd-4e99-84cb-d7397c154ec6", "sighting_of_ref": "indicator--ede9e4d1-714c-44e8-bafc-34df9c2e5da0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a287c2f-b1a8-4016-ad38-7c34810f4c08", "sighting_of_ref": "indicator--a809eb44-bfe7-47d1-a619-d1bbaec0e3e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d331e7d-2bef-433d-9937-068c1c539485", "sighting_of_ref": "indicator--b0bbcbd7-37be-4655-8cd3-738ad9e939a3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182418bc-97a9-43dd-bcaf-c235408638c9", "sighting_of_ref": "indicator--e01e0c83-3812-4b54-b88f-473150de39c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2e3aaa-df05-42d0-adc8-c0567eab69ba", "sighting_of_ref": "indicator--6b777384-7e2f-4e87-9c15-81ba6670378a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edd6b58-48f0-45b0-814f-eba67a2fe7c7", "sighting_of_ref": "indicator--42dc14ce-b752-43e7-ac44-942d044624e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963c477c-7898-403a-b1ac-912b6d6ee90d", "sighting_of_ref": "indicator--eb3551d3-de12-41b0-b147-1b978ab0a79f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479f872d-2541-4811-a81d-596fb764c752", "sighting_of_ref": "indicator--f97c9a4b-7726-4702-9809-f074bb4105ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c632f74-09f0-4f01-bfad-c4dcfa960bbb", "sighting_of_ref": "indicator--e5ee3b6c-9c38-4128-ab9a-ea226d5f4f93", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dab186c-ebfd-4ca3-b6eb-af0210ed8bbc", "sighting_of_ref": "indicator--c69b418b-3293-414e-aa26-e95bc5fd81df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d7d7e4-81f2-4759-9802-5f8ba2b2c0bb", "sighting_of_ref": "indicator--d6e01134-86be-4720-afb5-29ef2b37a7a5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adf69dd-fdbd-4901-855c-62e2bfdeeab0", "sighting_of_ref": "indicator--849f2f1c-090c-4d62-9ccb-64d2bcc11fe3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17711e72-0c1a-4109-a319-1d2108e46090", "sighting_of_ref": "indicator--11c1f156-6327-4d1e-b67c-1f1019e92ee8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9927b08-b9e4-4c4f-b811-2ea9e5c5de36", "sighting_of_ref": "indicator--08f93034-e7b1-4718-926e-fcd599940305", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74023ace-504a-40b2-87db-fa309ae77b67", "sighting_of_ref": "indicator--c4ef918b-3a02-45e8-ba7c-f107c038660a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395cc1c2-c969-43a7-a58d-57def2ea440c", "sighting_of_ref": "indicator--f865ac2d-a88a-4524-99b6-59e5fe292402", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa3b49f-0555-4fe5-858e-a40974ee022c", "sighting_of_ref": "indicator--c314316a-f368-45c7-a39c-80d04fdd4afd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e96b725-4024-451e-8fd0-bedfc5fea44e", "sighting_of_ref": "indicator--99633fae-6335-43fd-9baf-eccb2011db8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4a62d7-a8a2-404c-8ab7-2de82d40048f", "sighting_of_ref": "indicator--cacce1ce-0c1f-488c-b1a9-e131bb359509", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0370b3e8-42e7-4276-949e-f39ca92f5a0f", "sighting_of_ref": "indicator--f14a5098-1ea6-4c5f-8ac9-f1f6f3474473", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048a7b49-a744-4798-9762-a1332b53b62f", "sighting_of_ref": "indicator--695baf08-5cf2-4205-b304-52a99a0f7295", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28742c8b-7334-4fa3-ae83-24aa5c8dcd62", "sighting_of_ref": "indicator--9f6bbd7d-ade8-4d25-9924-374339c2d7a1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c6a0dc-bda0-4855-8f56-83d6c5191147", "sighting_of_ref": "indicator--8386ab34-4b4c-4f33-9240-9ef0a7d71c02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d786db-7e77-4492-81ff-cef24748b7c0", "sighting_of_ref": "indicator--2b1b5822-89a8-49a7-8c66-023eff80e69f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb3a39c-5c1d-49d2-a1a0-75fb31d19d04", "sighting_of_ref": "indicator--560a2fe6-a9fd-419b-9d9b-c711840b0303", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99d6af8-acec-4e6a-8065-5395e3068d3e", "sighting_of_ref": "indicator--f1e1210d-23bb-438b-9167-de8be8fb67ce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed33f8a-ed2f-4b69-9664-fc2bbbaaf388", "sighting_of_ref": "indicator--c7ea4f16-0c26-430b-bb71-4493924de1a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d33ea90-520b-4572-99b4-03b9702640d2", "sighting_of_ref": "indicator--6501c43c-3dcc-4a25-9442-24c0791a9141", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c637e74-0b5c-49bb-b220-cfd65b6ad8fd", "sighting_of_ref": "indicator--bd4da2d2-093a-457d-a706-7a922d89601e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b7635a-2825-473f-8843-61b6e3b220a0", "sighting_of_ref": "indicator--2d42d5f2-682b-4d3d-b0ab-1dd1790cb4f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb12d22-325f-4cd6-ac76-14c323da6acb", "sighting_of_ref": "indicator--683d2a5d-9010-4f3a-a3ca-9ca85f00a427", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06825b0c-480f-4e82-bd54-0709c33de50d", "sighting_of_ref": "indicator--82cc9024-69ee-4b28-bf10-c425da2bf79c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79b8f87-7c51-48fa-af11-c0a9e4e7125a", "sighting_of_ref": "indicator--0af1aeb9-51e3-4d66-8423-8a36d73984f4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3394f839-ae79-45f3-a415-0d411aeaea48", "sighting_of_ref": "indicator--9b9cb39f-94ba-4e08-baa4-5d6aa39e6a18", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92629ab0-fe24-4d3a-ae26-125f4de81297", "sighting_of_ref": "indicator--4b6a1f69-13f6-4c25-a8c9-d28adeb0c78b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091ea7ef-0e2a-4195-a155-3e454911738a", "sighting_of_ref": "indicator--3884337b-418d-4b61-bcd8-9b09ea906d78", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade833f4-9e64-49d3-829b-571752091f77", "sighting_of_ref": "indicator--69d05a50-333a-433f-a4fc-a28b866adefb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9c87066-68e6-456d-99e6-383af7b63b0e", "sighting_of_ref": "indicator--ab88fd4f-3483-482e-9808-b21e8105b5a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d089a92a-a9d0-4588-90c2-8d6ecf739d97", "sighting_of_ref": "indicator--662172bc-64d8-47c6-ba6d-6f6162474082", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0e977e5-50a4-4bc7-b217-8bec157a227b", "sighting_of_ref": "indicator--a3510506-825b-4224-beee-b540f3696e88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11c3f5c9-76e5-41e7-a648-6960619cee4d", "sighting_of_ref": "indicator--7795b3e9-f289-4ed8-9029-957abaa25f6e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde98594-cee2-4c7a-be9a-301123d54a3c", "sighting_of_ref": "indicator--2761b9a0-2ea2-41ee-8105-fa05b7c748df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a60031-1af4-4534-87b0-1d98892826ec", "sighting_of_ref": "indicator--c32932f2-a7bf-48b5-9045-0c6053d3436a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5497d124-8d01-45ad-aa53-74ca9d1db468", "sighting_of_ref": "indicator--9a1bdd57-7d28-44ff-9466-7fb6d72b4459", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dbe2695-e3c7-447d-96be-4b72e316b1d8", "sighting_of_ref": "indicator--4ede1075-edb7-4026-aafb-9812dbf8f744", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ae7567-9e45-4ec0-bbf6-40dce8528b54", "sighting_of_ref": "indicator--9acb10c6-d245-4222-b8b4-639cb27d1538", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379c18f5-ff5b-4d5f-af6f-9d135f4aec3a", "sighting_of_ref": "indicator--c6ee2278-b604-4404-933b-e776935d9b97", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84d6176-e43b-4aa4-b382-a35688296a51", "sighting_of_ref": "indicator--3dd90c7b-48de-4675-8862-9895e83715fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e78cf1-260e-4b1d-ac51-0f358328bdd3", "sighting_of_ref": "indicator--af82787f-812d-42c4-9ca7-a748c4fceaab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df58a10-fc3b-452f-a2cd-4d9d91990420", "sighting_of_ref": "indicator--47f0890e-7f7e-4a9c-abe9-86b0892e3dbb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94ba294-ba57-40c4-8a5b-c07f2f239d88", "sighting_of_ref": "indicator--2f9b0392-6e71-4c99-907d-7beb74f0a704", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eba2b41-0e0c-400d-b4cc-343c23476ecc", "sighting_of_ref": "indicator--f4b00ce1-cff1-4fda-b693-09281a695634", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a12a8d7-014f-4cf7-be10-bf3137a7e291", "sighting_of_ref": "indicator--2a707971-0e47-43b2-92d5-4ab8e353143b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6c436f-c61d-4e5f-a642-4c04e7b8c093", "sighting_of_ref": "indicator--82d4d55b-082c-4404-99e0-aadbbc1073d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8cb105-3d0d-49c8-a1ee-6b4a3fa308a7", "sighting_of_ref": "indicator--6938f791-0e2c-4ec8-8b5e-967b5e77e474", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1327cd4-55f1-40cc-999a-f68415228dc0", "sighting_of_ref": "indicator--ecd69717-46ed-4496-94ce-b6951320069c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e176fc7-86cc-464e-b7e4-ecec37cd41fd", "sighting_of_ref": "indicator--b9c28a18-b539-4639-b35a-007c3761273b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29638c69-bfbf-4421-9dbb-bf0d8227179f", "sighting_of_ref": "indicator--3252c2f4-1f03-4ecc-8f97-04d9f25d2fac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ef755f-5cc0-4e27-8d2e-abbaf182b5c5", "sighting_of_ref": "indicator--49e49e12-0b71-40c7-b237-bd049032cb7d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfcda59-baed-4164-9ad7-59622549c51d", "sighting_of_ref": "indicator--f42c398d-50fc-4a3b-9837-5cd3b6667090", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2fcc9fb-bc10-4ab2-ac75-bff33dd4ebb7", "sighting_of_ref": "indicator--4955efc7-b44a-4679-8b9d-3225a2b5bba4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf6a3af-4193-4f79-952f-9bd14a62e44d", "sighting_of_ref": "indicator--86597e97-a7c7-4a72-a1e2-a595e70ed07d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6612831e-e804-4f24-baea-83259137348d", "sighting_of_ref": "indicator--d4f4f5ef-5446-4752-8341-60f3bab60049", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2de93d7-9369-4ce9-a756-85abe1cbf3c0", "sighting_of_ref": "indicator--169feae9-3a9b-4167-9e1e-5cebca63a1e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab05c06-ac48-4bd8-bd39-dfb33a07946a", "sighting_of_ref": "indicator--bcbec4e9-95a5-47b4-aceb-e28ea23141b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a629a1a9-a612-4b61-85a3-21939952ff1a", "sighting_of_ref": "indicator--2c9fcf6a-1bb5-4da9-9970-dac65a1dc10d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80eb7ce3-9cec-4360-9130-5ce4a17ba59a", "sighting_of_ref": "indicator--ccf3e4ab-1832-47c2-b4f0-52e32fad1e4f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70b48c3-2285-4297-8fa9-be4f8dc0fdaf", "sighting_of_ref": "indicator--98bb6790-ae13-41b8-864a-5957d35265c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03ea532-b7ba-4175-a241-9c1c4908aa76", "sighting_of_ref": "indicator--a6df498c-52c2-41cc-b048-c10379a66f21", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcea054-b172-4fa7-a2a6-4124d3d54ad8", "sighting_of_ref": "indicator--4f0b2b8b-ba5b-4ec9-8d4a-bd2ed7b5efec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63350f3-d172-487f-bb8a-f52ded3ef574", "sighting_of_ref": "indicator--2008317e-6d9a-4602-8582-c438e492df7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0502106-9402-46fc-8b08-d44b4bda8008", "sighting_of_ref": "indicator--104da2c4-b9a9-4843-bba7-d7ee9ca91fb7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a80fba9-c9b5-4430-8c55-f57ddc56b5e3", "sighting_of_ref": "indicator--0b1a6e73-b11c-4cb0-9def-9d71d333ba92", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d7310c-1243-4928-910c-93b4d5bbdb9c", "sighting_of_ref": "indicator--77a1cfef-2a62-48ba-a6a6-7cdef2981de5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e049064f-54f8-4fb0-a928-cbb58c51a7b5", "sighting_of_ref": "indicator--b1f51daa-0c35-49f4-8961-bbcca4ac1643", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da50a3d-9551-4ca6-a8ae-fe9033b1b760", "sighting_of_ref": "indicator--f0dee968-ad53-4999-bab4-134f0787123d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243c2625-5dd7-4de9-b483-c8e635277619", "sighting_of_ref": "indicator--1e2536ad-8adb-48a3-972d-677c0b7d981a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a419412-0810-4a6b-b909-259e26cd88dd", "sighting_of_ref": "indicator--d1fcbbf2-d141-43a2-8d9e-0ba017556f44", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eff7d0c-fb43-4170-bbbf-cc726ec1971f", "sighting_of_ref": "indicator--4f2b47b8-cec1-42db-bd02-13326c1c4c70", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3433d7e8-de7a-4d64-81e2-efd8baaf1c04", "sighting_of_ref": "indicator--6b22fab5-1685-4b00-bff3-ae626b0144e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f2db60-d406-477b-a1dd-b7951577f4ff", "sighting_of_ref": "indicator--3b166d08-bd2b-424c-974d-c9be21e051a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d356657c-0328-4f45-a904-7d281a556d5a", "sighting_of_ref": "indicator--feff2710-c69a-4f62-b58f-228b118ae8ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ecf6cb-f92a-47ba-9d6a-e70558f8261b", "sighting_of_ref": "indicator--7d74e194-d792-4535-b5d1-fcbf27e553c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0550c070-7aee-4ba8-931c-aca393251ba7", "sighting_of_ref": "indicator--0ceef542-ac79-4636-864d-dfae47e92cd0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98da829-58a9-40d5-a134-5eed9c03e7be", "sighting_of_ref": "indicator--0721479e-6d15-40e4-88e3-42720168401a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c878d1-86df-45d1-adc6-74532aecf355", "sighting_of_ref": "indicator--3fcc193e-5623-42f3-8b2a-850f8f35b985", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec643439-365c-4770-a11f-a16c4343f7bc", "sighting_of_ref": "indicator--92955fa6-d948-4d08-a7b9-479fdd3eeb06", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009988ac-9357-44d6-bb68-f0b1563d245a", "sighting_of_ref": "indicator--709609f5-7de8-48ca-8cb5-255348eb4368", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a82bab9-93fd-49b8-8f16-d9cd6d247c67", "sighting_of_ref": "indicator--52712edf-ee7d-4e04-96b1-1d851233203a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efcf90e-5efe-43b9-ae2c-89844956d008", "sighting_of_ref": "indicator--31348c9b-a59a-435b-862c-90cebf532f1f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0e77f9-ff50-40c4-b4b6-d27c3bf35c16", "sighting_of_ref": "indicator--5f15cf5c-76be-41cb-9178-d4826b06258f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a667fb98-bf91-4f2e-829e-09cd7a908eff", "sighting_of_ref": "indicator--22cab5b6-b2a6-4b82-9a1b-a002b1f7001b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803ffc8e-1b64-403c-8100-762eca884864", "sighting_of_ref": "indicator--eb8e6596-d94c-4f11-8478-dcf688a1b948", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306c4aea-454f-4d99-9d3c-254accd47d3c", "sighting_of_ref": "indicator--0aaedf74-42ee-4c2d-abb0-7c733d2438d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae3e727-32ed-4952-ae63-eae6bf4f8a6d", "sighting_of_ref": "indicator--f73ed88f-73f0-4b5c-a3f1-e2c5f8a69f98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dc7ebd-8134-4522-8c69-124478335d5a", "sighting_of_ref": "indicator--3e0ec2f9-30bd-429e-a234-b72fa2c8fd93", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb978ad7-d3f6-48a9-a8ff-606d6e55e49f", "sighting_of_ref": "indicator--5cd7d65a-93de-4908-b621-e23eee05e9f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1586d8-5275-4a52-a373-737b74a51b9e", "sighting_of_ref": "indicator--0460bdc9-8a2a-4b7f-88f9-6428f2ab7469", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add9800e-336c-42f9-b8e5-1eb5dbb84cd6", "sighting_of_ref": "indicator--f4ed1e28-12f5-4515-b503-ffb938b08f87", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378d2ea9-8d6a-453a-bdf9-2289eb6758b9", "sighting_of_ref": "indicator--25046890-773d-4292-bd36-490fbc626884", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b744513-84e1-4eab-afc7-026ae228ea0a", "sighting_of_ref": "indicator--84004db6-2372-4571-8264-87d27cf4eba2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a60a5f-f7d6-4469-b300-171018a72779", "sighting_of_ref": "indicator--fca921ad-3bb3-4b8f-8856-75158923fefd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253dc7c6-89ef-4916-b7a0-721ea0e574f9", "sighting_of_ref": "indicator--2c415aa3-e329-4c72-858d-d87f97138003", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82c465d-05b1-4508-b1dc-ab683cc4387b", "sighting_of_ref": "indicator--fbc8768d-62df-41ab-b71d-700ee71efdad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa23b345-f59e-4ad1-a88e-fc1446cc4548", "sighting_of_ref": "indicator--ff75328c-dfcb-4546-8144-8948e001d658", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef45f74-3543-41d4-bea0-f060619039f9", "sighting_of_ref": "indicator--583f4766-79dd-4906-b38e-c3b25ddc84f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28298c14-f4eb-41cd-93fa-77d93eb4b312", "sighting_of_ref": "indicator--b832f11a-20de-493b-a38f-ba7b1aa0cd75", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71a1506-fb10-469f-9c9b-7bb092408198", "sighting_of_ref": "indicator--4226466f-c7d3-4b5e-aecd-88e5edef6413", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718a0b2b-e8ce-40bf-be41-2460b32921d8", "sighting_of_ref": "indicator--e6b51a4a-cfb0-464a-b34f-2ef0b82026c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55235d46-fcd4-4764-a9a1-73531d9b8f16", "sighting_of_ref": "indicator--95222c8b-a6c3-4ad7-926a-809faf4a5203", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114ffdee-5272-4f2d-aa6d-12dec8a13a6b", "sighting_of_ref": "indicator--88c308d3-857d-47a5-ab2c-a567cb9508ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbb376da-59a9-48fe-a743-76d18d11aa0c", "sighting_of_ref": "indicator--fb5ced87-ebad-452b-a89e-fa9ca007a847", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa83eaf-ea93-4971-b97a-f88fc362ddcc", "sighting_of_ref": "indicator--772ef12a-5842-4299-ae81-e4b868fc1a0c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7444fc9c-9ecc-4e1c-a476-64f7f9975f76", "sighting_of_ref": "indicator--b8ec4dcf-2dd6-46ec-a2ec-9f4d7f1c58bc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78017746-f5df-4700-a099-5b7b982e0595", "sighting_of_ref": "indicator--9f64c06a-de88-4f6d-afcb-e379b9a2e550", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62993ab5-4637-46f0-b964-b0638f8643c8", "sighting_of_ref": "indicator--382448ae-40ec-4983-8a16-7cc861e6482c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4439cc-a64c-488f-9a80-2c52f5df1b92", "sighting_of_ref": "indicator--af16a370-ccc7-4bb1-bc87-a82aae0bfd4a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efe8411-9492-4a8b-93a5-66213a991979", "sighting_of_ref": "indicator--405b75bc-3ef3-436f-99c6-5b6e1ab90d83", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6acff0d-b34e-442e-a949-a853b2ad5fe1", "sighting_of_ref": "indicator--9608d627-fd91-47b1-9ef2-81fcd1cc95ce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0ba681-0bc7-454b-9cab-7f303d2c3a5b", "sighting_of_ref": "indicator--e8e603e7-7528-4046-a92f-85ce4df2f581", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba829053-10fe-48c7-ab36-0545eb7ab933", "sighting_of_ref": "indicator--5eb2e97d-e33a-451b-a1ae-daae63d178ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e61f55-44b4-40e0-997e-898ffba1574a", "sighting_of_ref": "indicator--f224d86d-2da8-4551-a229-f1f9db4377d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce40de59-b125-4c8e-b581-93b39496b98d", "sighting_of_ref": "indicator--78a3974f-be0e-435a-a5cf-91182e8e4afe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c48886-43b1-4bfc-915e-8b1ecde84920", "sighting_of_ref": "indicator--197fba02-1025-49aa-9aff-3f1bc3bcfcfd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ad8138-e11a-4df3-97f7-bcd0a5db7427", "sighting_of_ref": "indicator--b7f66fa0-99fa-40dd-b78e-a6e7da7c01c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f04bf9e-7de8-41ef-bb94-9020fdb84093", "sighting_of_ref": "indicator--3c2d5618-7612-47f8-a9c8-9e1fb17bf77d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89896dab-e8e7-4c8b-bdc8-918115673315", "sighting_of_ref": "indicator--12ef50dc-6ec6-44eb-9564-8f3f475ea0a3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea0de1f-4f53-4abd-b585-4f7a8c0c1b9b", "sighting_of_ref": "indicator--214cc228-2268-4ab0-b01c-1232936d495f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a559e6-707b-4c91-bdac-9d756cd6cc10", "sighting_of_ref": "indicator--a0885b24-227f-476f-ae63-71cee1b5f818", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526caf93-838d-4542-a0dc-a10a55472967", "sighting_of_ref": "indicator--33489dbe-ec75-460f-8785-04a9a7873919", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7edeb29a-cc69-417b-8190-96536935e95d", "sighting_of_ref": "indicator--c1d5160c-1149-4255-a0b0-bb1cf5c3572e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94f5d12-0d45-4314-8d59-b3b438313840", "sighting_of_ref": "indicator--8e82a759-4bdb-4374-884c-7fa90df0dd6a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7367350-1473-495c-ad5f-b89a308c51fa", "sighting_of_ref": "indicator--de055f4a-0949-4bef-83d6-fe7a6b8005dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0edcc8-6545-4ffb-9cbe-4944df43ea23", "sighting_of_ref": "indicator--3c81d103-3193-4e67-89ba-b45933d4a13c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ca4583-7eb8-43de-816c-3df0d0d9e8ca", "sighting_of_ref": "indicator--60c4f535-60b8-4975-be44-821d213cf807", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72f5504-3159-4dfd-8b32-64b2ef88d899", "sighting_of_ref": "indicator--741379a9-9a50-4fa1-a711-e76848bd617f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d122d9f-b265-4d2c-a1ce-dca17f3fed94", "sighting_of_ref": "indicator--46848110-9feb-4a2d-b18e-f9cd5f9eb9da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77642813-f9a9-46e8-be6d-b2aba9f4f554", "sighting_of_ref": "indicator--4814627b-8e57-471b-8351-f33521dd5bdf", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31644786-e33c-40b4-a632-bf51f0438f53", "sighting_of_ref": "indicator--3fbdee64-dd80-4c7b-bd30-5558aba17e90", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef360d67-e283-48a0-a9a5-17d5a5091aa9", "sighting_of_ref": "indicator--850f77aa-865c-434a-8058-a883154e5b5e", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a8676e-1a40-4725-b40f-396deeb82678", "sighting_of_ref": "indicator--4e22cf49-f020-471f-90a1-cfb98e5854e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f150307-4c99-4daf-a2b9-834613c4af94", "sighting_of_ref": "indicator--8ddbf40f-b9b2-4484-becf-1f5ea389597d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a20274-3ce8-49b8-8cc0-2c50299e28fa", "sighting_of_ref": "indicator--fbeb1b14-65ba-42c6-b708-4ba5728467a7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5fc410-5aa6-4b25-94eb-e4cbed22a8e3", "sighting_of_ref": "indicator--91aa4665-a02f-4bb7-a50d-e366f91a39ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db50ebd0-5a5b-480c-b239-b98e093fc5ea", "sighting_of_ref": "indicator--ef008cac-2cd0-49e0-be72-66e843335071", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fedc696-e0e4-4b15-bcd2-cffe91ab554a", "sighting_of_ref": "indicator--fa370959-4d51-4d39-a1e6-7aa974fa6578", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3681bf0a-de74-4bfa-8e8c-92db3aa1943b", "sighting_of_ref": "indicator--7c24f07f-25ac-4290-8eaa-dc7ee6060fd3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f68c87-9a0e-4387-81a6-810040b9fbea", "sighting_of_ref": "indicator--c73865b4-d0a3-4ff1-b4a8-7d00011da423", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f42381c-03cd-47a4-8c76-df0f7537cf8a", "sighting_of_ref": "indicator--8a5c8cd0-0a32-41b2-baeb-ecd3773ba308", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca38ca78-5bd3-4ad4-8e44-8aec1adb3920", "sighting_of_ref": "indicator--3d68317c-9e89-4959-9492-0dff1c414694", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0ed6ff-0f11-42f8-b322-d4a633bb688e", "sighting_of_ref": "indicator--4d09660d-1ea6-4add-af6d-23af07838878", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8300f421-c35f-4b42-b9db-2231c7ff8e21", "sighting_of_ref": "indicator--76c7c776-ac7a-4790-a51b-55825858349e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba51ac9-5a79-4f44-a911-7dcfe4ca7cb0", "sighting_of_ref": "indicator--8ca98329-6bd5-4f20-b728-2ab66bdabca9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f3c03b-b6f1-45f5-8f64-3c4b276619fa", "sighting_of_ref": "indicator--625bd2c7-be63-4031-9355-14260fdc1b65", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b9f7a5-41c6-441d-af54-e1dc2aec5051", "sighting_of_ref": "indicator--cd26897b-3767-4326-95a7-d21376aa0389", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1e9c4c-6151-423d-87d5-ed5105c454a6", "sighting_of_ref": "indicator--f51f28ea-63d6-46c7-b8e4-6c88c4ef41de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e21bc64-dee8-4dc8-b4f9-e66f910bfbeb", "sighting_of_ref": "indicator--db66d273-8963-4f1e-acd7-29a7ad3dd51e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c1b7af-c1b2-4d2f-8639-d92f53e7a115", "sighting_of_ref": "indicator--c2585510-dee3-46ed-9f05-df9d323a48a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f851ff5d-9a4f-4c54-82e5-f66d9c984d94", "sighting_of_ref": "indicator--e9ca1d13-2383-42ff-937f-f9d3c1f45a38", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a71196-e341-4d12-b26b-967d8735dc21", "sighting_of_ref": "indicator--11d31a0e-7c5a-49e4-9a2c-def267684fa1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c374cf57-e895-40d5-9b68-7f5c70c7c4bb", "sighting_of_ref": "indicator--4aef7e40-beff-43e9-a951-8cfa611b0708", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc436999-ce62-4148-aea0-398c995d173e", "sighting_of_ref": "indicator--e85c125d-15ae-4d0f-a0be-425fb5b35f03", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ccb2a5f-66b3-4f03-8e0d-3c991cf5320a", "sighting_of_ref": "indicator--44116b5d-10e1-40e2-8e71-03bc17a51433", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb8aa7a-4f7d-48b4-9801-a3017563544a", "sighting_of_ref": "indicator--153b43a3-7842-4ae6-82a2-f27d4e7cc60f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d8cd4a3-cb0b-4f3d-9b03-32f1693a1611", "sighting_of_ref": "indicator--5817e764-c204-434f-a543-d453ec2082fe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379feda4-4e53-44a9-a123-1000d4437357", "sighting_of_ref": "indicator--6b24b164-dcd2-4134-a8e3-8e57b657abbc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43575555-61b9-4f81-9de5-3d1e2d054ca5", "sighting_of_ref": "indicator--3090b34e-1d5f-48de-9df5-f14cf0256442", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1348e99d-c648-4c9a-9d34-8557479f1376", "sighting_of_ref": "indicator--ca0d7ecc-2fec-48d9-bf62-fec21dbe7602", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8043b6-da60-4cb1-827c-be55414c84d5", "sighting_of_ref": "indicator--7ef2f6f0-e7ad-4a91-b9c5-c57dc53cbf5f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8847300e-4dc6-46a5-b8b3-c9e91c2f499b", "sighting_of_ref": "indicator--57b40117-cf09-469b-974f-08c1ceed017e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2264442c-5ab9-4046-88f7-084baef189a5", "sighting_of_ref": "indicator--9bdd5c56-5d22-429e-a808-ed75f2852c1c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7a0ff9f-cf05-49b1-a3ca-e2b8e804ffa1", "sighting_of_ref": "indicator--c1c00109-46a3-4b80-aaae-ca395e41af73", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e47296-7dc7-4746-8730-d59e459262cb", "sighting_of_ref": "indicator--0738496e-a8f2-41ed-8cf3-b0a0ce3f138e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc03dfc7-f49a-4676-8e78-dd1093ffe6b2", "sighting_of_ref": "indicator--308a0100-e381-40ff-8583-5946bbb4fc34", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022cee35-5620-4c3f-90f8-a809101b27db", "sighting_of_ref": "indicator--674efc2a-cb47-4b62-83d7-8f272a9b3360", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa82f47-5e79-4621-adee-cfa56f278879", "sighting_of_ref": "indicator--fe9300dd-f8ae-4bd5-b127-abbbf53bc0b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7309aad-5962-4386-884d-640144a21a43", "sighting_of_ref": "indicator--2ddb13b6-a9fb-4f4f-8fcc-28e69b0da511", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d92b8239-36f5-412e-9dd9-aad19d709232", "sighting_of_ref": "indicator--8f7a0474-daf9-48d4-a16e-9fff0430058a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2a708a-a4bf-41f7-a691-c60899b21119", "sighting_of_ref": "indicator--c435adc6-1e90-433b-b64b-f622bb61e7b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e56fd6-55f1-4ce8-8c4b-13659c1ef1e0", "sighting_of_ref": "indicator--d548c1d3-f699-4802-bc88-ce5d26842556", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f9aeda-24ea-4318-be10-25a728730f89", "sighting_of_ref": "indicator--ff5bb9a7-dad5-4535-9dcd-14682daa8ce3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20b2b4f-a1e6-45dd-80be-ac0ac17a347e", "sighting_of_ref": "indicator--23461be3-a0fd-4a6f-b203-84897c54a3bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0148ba48-b305-41a4-801c-a7ee762348ea", "sighting_of_ref": "indicator--95d5a1be-abfa-424b-ae66-5e3d4ddbe778", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce8da9a3-44ce-4c2d-8d79-1b5bc0743b32", "sighting_of_ref": "indicator--6788713c-e6ee-45fa-a41d-5568341a2166", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3150ac8-2a99-4a27-a2f8-ec1fd175ad08", "sighting_of_ref": "indicator--68afd70d-46d3-43d9-b153-6a4fe796ea89", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43e27fe-3bda-4729-949f-102dc8108e0c", "sighting_of_ref": "indicator--aea1a631-6b4b-4e0c-a290-9ad92835f38f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ca9289-1d41-4de6-bbc7-30b24969b921", "sighting_of_ref": "indicator--a457bc81-ef2b-4cde-a332-159fa22a12cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872c53d7-565f-4645-9883-7c0c58d60d6d", "sighting_of_ref": "indicator--07f00b4f-2896-4ce2-a9f2-5f5da7f15e4d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcfbe93-3737-44bb-afc7-25135d098e19", "sighting_of_ref": "indicator--43d73cd6-fc34-4cd7-b8ec-ba8118103dd6", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51d2522-2bb9-4856-89cf-2936402bacf4", "sighting_of_ref": "indicator--8df68460-dc4f-4290-8d29-e289709cbcf1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8dfa61-1997-4f9a-ae0a-9d9304a9a198", "sighting_of_ref": "indicator--f28e96c9-5d48-4495-9219-50444f95968f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a933e3f-6c57-4ff6-bbed-32ba663aa35b", "sighting_of_ref": "indicator--a4956146-79a3-4aa9-9cf8-3b91532d5eee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa08ff19-9e00-4a87-b6c8-6361ea313eea", "sighting_of_ref": "indicator--96534c34-e18c-4344-99a3-fcb5986b5108", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07909702-15d9-4f1e-996f-bf491e4ea180", "sighting_of_ref": "indicator--865a7b5d-f2a5-451a-a11b-59a6b0f4b9b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e100fc-7b1e-4bd9-bd9c-cab77f9bde81", "sighting_of_ref": "indicator--b1598500-c2c6-45c5-9cee-e8192c1290a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6982b132-76ed-42fd-b777-60f3483d5305", "sighting_of_ref": "indicator--b1598500-c2c6-45c5-9cee-e8192c1290a1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedf2d91-4626-44bc-a883-fa9175b02714", "sighting_of_ref": "indicator--1a8fcdbf-ccd2-49d6-a8b6-cf698b36abdc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5277da-dae5-4658-bcd0-a85fa2c41484", "sighting_of_ref": "indicator--7ea7b5a5-4c5e-4237-af8c-e9ba110f7e95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8181fec-32d8-4a2f-bedd-b464fc63c99f", "sighting_of_ref": "indicator--91ffe27b-1da2-4bdc-9a58-43210dfc606b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f0a96b-bc5b-4822-b683-76b9e1285204", "sighting_of_ref": "indicator--637751cc-e22f-4103-b362-32dae31a1052", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53dba5e-9a8f-4f60-9f97-24eb48d45fef", "sighting_of_ref": "indicator--2529e769-cad9-49c3-bb29-746944f53a6a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abbe8cc6-bc2b-475b-827c-7a9380bd692d", "sighting_of_ref": "indicator--23a503e6-9c94-40f3-abe6-ab61b0351c28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90073e11-5be8-4f56-b2ef-cb395200c723", "sighting_of_ref": "indicator--d321d5c7-d952-45b7-a7f2-b8cf3c6e79f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d72805-45ff-4089-a774-f74b98f47379", "sighting_of_ref": "indicator--7480e0ba-41ce-4408-aa57-4dc826c6b6fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeb4a22-7996-44c9-b57b-22d64919b4cc", "sighting_of_ref": "indicator--3b1ad241-14d7-42fa-b370-4d6200f30e9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd0009e-bb97-4a27-943d-73d57ca97be4", "sighting_of_ref": "indicator--63387877-1bf0-41c9-b4c1-f779b8fe7498", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d062b7-c208-46c5-b37c-dc9d1576d786", "sighting_of_ref": "indicator--3f8d8236-6961-4d61-b6c0-6a2f0bf634de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccafa95-c927-4e43-8fde-42a91af5fa9a", "sighting_of_ref": "indicator--9883eced-66a4-4592-9a98-8fca5e4e64f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba4ae2c-0811-44de-bbd2-360c43e30338", "sighting_of_ref": "indicator--6b0574d2-4f61-488a-936b-1e9daf3a7108", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baafb89-0ea0-4868-a071-ea8dfe1ae29a", "sighting_of_ref": "indicator--1b3c9723-dacc-4d5b-bed0-7282bb9ae278", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4085066-31b3-4c1f-95fc-fdecd84ec883", "sighting_of_ref": "indicator--a8f836a6-8feb-4936-8f71-edf33650274b", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a73503e-6d2f-4560-836c-5ef61eaa2f7d", "sighting_of_ref": "indicator--905ec608-37e3-4eee-83c5-2c489f112c4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f17bf21-7d62-4add-bd2c-4584bb2219e0", "sighting_of_ref": "indicator--e6dae36a-5e55-48d1-a078-c9599b27e695", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cd851ea-eccb-4d25-a375-52cc86c2d389", "sighting_of_ref": "indicator--6a6078b7-f4bb-4066-97e3-a5fc694c24c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94669605-ad85-4009-a4d2-b94dab49536f", "sighting_of_ref": "indicator--833613e3-efc9-4cb6-b009-191a5ecbce80", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a174c5-1084-4b79-a6cb-e425c09392cc", "sighting_of_ref": "indicator--06a60a59-87db-4ee3-ba91-6bb9f3a19acc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cc2bd2-1bc5-4b45-96c1-91c6b8339011", "sighting_of_ref": "indicator--15672c03-c131-447f-ac39-710f2add82e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d57b882-3ff3-4c11-884b-c4562e9262ed", "sighting_of_ref": "indicator--268e4141-166e-4d15-97c9-c208b50680f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fdcffb-5ece-412c-976e-c02afeedf716", "sighting_of_ref": "indicator--972b09a3-11fa-4e79-ac6b-09c3e884692b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95eb4e95-a507-4faa-bb5a-fcea41ec6cb2", "sighting_of_ref": "indicator--c2b2152c-66d6-4de9-9efe-085aa71c41d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d18abac-8638-49da-a024-a2d83387cb85", "sighting_of_ref": "indicator--aea8c44f-edb0-4490-aa5d-522c3088d93c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869a6d5c-0dc4-44c3-b0f7-a4c69c9f066e", "sighting_of_ref": "indicator--4d8f4840-9a69-4f77-94b4-51e8cdd84cf2", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc509533-1139-4482-975d-2205f4f5db69", "sighting_of_ref": "indicator--636a3164-5c44-4a1c-bc22-10c9b9cf995d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51526925-b162-4a74-8fc3-843cf823e31e", "sighting_of_ref": "indicator--64df3e67-3582-4dea-aa83-34aeacec36a0", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc324e04-e946-400d-bd8e-48a9e8647fcc", "sighting_of_ref": "indicator--43228603-bb11-4a9d-94e1-751bb3989a3b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66461f7e-8627-4665-b52b-a1856673f695", "sighting_of_ref": "indicator--65661c6a-558f-4e6a-aa8e-e4b4335f70b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81eda105-6040-4c54-9f42-d677235b1969", "sighting_of_ref": "indicator--c5b00c49-98cb-4a96-ab87-183930a78844", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd0d25d-f794-4888-ae90-21b91ed8ab07", "sighting_of_ref": "indicator--4b8130aa-00d0-42f3-85cf-31fcb4f29856", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e08589-48c1-4fbe-8b2a-6a0eb9c317bf", "sighting_of_ref": "indicator--d4651424-da32-4dae-bc0d-01899236eaa4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6733b778-0f06-4fe7-94b9-4b67c3e4fb51", "sighting_of_ref": "indicator--86729f2a-58b3-44ed-8683-1fc86ce0f791", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4bbf745-ec20-45cc-a431-540d2f90e3e4", "sighting_of_ref": "indicator--a1ef98f8-9183-4a15-ac68-68776746312d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a376a128-a3c7-4827-8506-5eeb74da4aa4", "sighting_of_ref": "indicator--510e6037-b44e-4cca-8ae8-d83f7c6099a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ca311f-0910-44f0-844a-6db1a22c5b5b", "sighting_of_ref": "indicator--998a471e-9778-45bd-bf85-c53f326ebea2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5636d092-2c74-4c50-b019-38a16875b214", "sighting_of_ref": "indicator--230c96f1-4beb-4e8f-8018-aaeaa728bcaa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589f2de6-c2a9-47f8-884c-e9443672cb78", "sighting_of_ref": "indicator--0b88dcf5-5e4d-489c-900e-db50b7f82cd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3c3762-39e7-4c16-bcee-c678fad9e496", "sighting_of_ref": "indicator--c1a57320-7c9e-474d-a50e-afd0b6869967", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fcca8e-8c1c-41aa-ae99-ce3b94648c97", "sighting_of_ref": "indicator--64178900-7a6b-4f13-8e22-e2ab41effe49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d567844e-18b6-4f42-9b99-e546198dfa57", "sighting_of_ref": "indicator--6feece42-0fb6-425b-9b82-433da8cd4c61", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf03bf0-c301-4240-a339-2c23eb664518", "sighting_of_ref": "indicator--5ed8e366-6bb3-455c-8e52-d20453b675d2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd69c6b8-d6aa-42c3-baca-a423cc40fdb7", "sighting_of_ref": "indicator--a7e92b1a-2001-4426-8ee7-a60eeaeaf25b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cce8c0-fbeb-4f2c-94df-b1cd18eb4316", "sighting_of_ref": "indicator--81114430-d29d-41be-8203-ce154e60a7bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649ef21f-1fcc-4e3e-a0fd-93e06f756ea0", "sighting_of_ref": "indicator--ee7d1d83-1640-4e9b-a50b-a29ae6614385", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2024457c-fce7-4062-b844-d42ea340e9d3", "sighting_of_ref": "indicator--4445059f-1f75-4454-87f4-36b840c1b581", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1530aa20-526e-4ce4-a726-e41fa3dd1361", "sighting_of_ref": "indicator--45296307-b3e4-46ae-bee7-9808ccfc968e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a80bdd0f-44cb-4aba-b4cc-7e66b2f7ddfa", "sighting_of_ref": "indicator--79ac338b-b909-419f-a60d-6dd065537257", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c634d968-8db7-448d-820d-eb27d8a7a5fc", "sighting_of_ref": "indicator--7ae568c9-3a77-46e5-9b16-a4d57b88fd14", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a44af6-5177-4257-993a-d7cb84872533", "sighting_of_ref": "indicator--e26087b2-bfa8-46e5-98a4-b2724340ba26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ca2433-23aa-48dd-948e-f7a4b309a28f", "sighting_of_ref": "indicator--9caee285-64a6-4476-9d08-de54436544eb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb27f3be-eba7-48b2-9e12-0e2d6ab8261e", "sighting_of_ref": "indicator--74fe1587-2504-47eb-8d5a-14f227f5446f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879836db-46aa-4c42-80f0-441060964b4e", "sighting_of_ref": "indicator--761491a8-f85e-4f0c-a861-9d24ebbf89bc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8e04ff-7160-42da-bd8e-13499a12c24a", "sighting_of_ref": "indicator--dcb627c4-91ef-4001-8b52-204f1b722f84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16fee5a-a43d-4123-a2d0-7644199b51df", "sighting_of_ref": "indicator--e4efe5d8-d46b-4bb0-9ee2-697228afc076", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5cef30-1184-4712-91bc-0d7af10dd260", "sighting_of_ref": "indicator--d5e57725-5ca5-4ac2-af20-eb6589450ee2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706e0fb5-4e02-4c4b-b0e6-344a7b92ab16", "sighting_of_ref": "indicator--03a581f6-5aa1-4a0a-bfe1-79d64f59f35b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c328fe38-a1a8-4784-8858-4ca88d8c26a9", "sighting_of_ref": "indicator--ee96acb9-efe7-4cb5-960e-fb86335f8433", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c82ac6-e756-4461-b024-10fe1815e676", "sighting_of_ref": "indicator--7f232a51-6a70-4e53-a3b5-f1113255c3de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787eee00-9ee9-4759-934f-900a0729472b", "sighting_of_ref": "indicator--c5fcd886-5fcc-47e1-9ebc-70b67923bf36", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f9e81f-9d67-469f-95fa-3c6c6fdb9022", "sighting_of_ref": "indicator--48edcf5c-239f-4a78-adda-69ef2989b1db", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e57df16-97af-4202-af96-aa394785a5c8", "sighting_of_ref": "indicator--a3074d1e-a667-4577-9a24-d235b7178d90", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca2fc60-7d44-4083-81da-234022e100e3", "sighting_of_ref": "indicator--e4f3cbee-9488-4d48-a34c-9942e3ba5318", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f87118-8072-48f3-981f-e641d872eb88", "sighting_of_ref": "indicator--698514a4-391a-4ee6-b64e-6867d31490e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f94d2e-9784-4110-9c27-87f1d8c81707", "sighting_of_ref": "indicator--f33f77d7-11c9-428c-b8dd-9418b95b1d83", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8378b13-b22c-42d6-a088-64fbf4351813", "sighting_of_ref": "indicator--2555264e-a520-4bb8-90d8-af3cc93a97d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27214456-cfb4-4d93-9cf8-d518a6515ee7", "sighting_of_ref": "indicator--80437542-3bb9-4f9d-ab4e-99177ae37637", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be43d1c3-83c5-4cd7-ba48-11cf81dc2352", "sighting_of_ref": "indicator--74546233-7d71-4154-9dc6-cc2681f826a7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33190934-5f8f-4e26-963c-30cae5c6d579", "sighting_of_ref": "indicator--83d01861-92f9-49b1-b4ff-31c863f2476e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2a84e1-a84a-465c-9e07-96fe3ffd8a78", "sighting_of_ref": "indicator--39c9b27c-f7c1-4030-a3cd-38e6a7f618ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293100fa-446c-4606-9618-3631071cb2b2", "sighting_of_ref": "indicator--c8d4f182-a77e-4e4f-a895-49ac391eb1ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8eafb3-6fc3-47e2-a1e4-ae5f493c9141", "sighting_of_ref": "indicator--b82c88e5-ae98-4c1c-985c-67d0c2fc92c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5c883f-103b-4cd1-a9b6-445b7ea3a8c6", "sighting_of_ref": "indicator--0fdf1f84-1c30-49dc-a5b1-d8b09227c75c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73c03a9-20fe-4ff0-8585-ce55d37883ef", "sighting_of_ref": "indicator--fe55c01f-a6fc-4776-9ce7-e4bd6dd7af36", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df41b6a-777a-422d-8040-b3f556dab6cb", "sighting_of_ref": "indicator--3d23706a-ab39-4553-bf8e-90b6a5437181", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06fbbbe-647e-4b25-af6d-7222a3129c79", "sighting_of_ref": "indicator--57079cee-91d7-4218-8f1f-8c56098739c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5ff323-94c5-4aaa-840a-6062fb7b5e30", "sighting_of_ref": "indicator--d8bc00c8-d863-4194-8841-d4b35f2c7064", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e383caf-ec6d-4219-a7e6-b121c95fd964", "sighting_of_ref": "indicator--1f7ede21-dc21-45a0-b8ed-143d3fb0694a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e968060-6c4a-4976-8ec3-dca9a59510b3", "sighting_of_ref": "indicator--f65e1c58-40df-47f5-912c-92db340b9ef0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7f8697-2906-441c-a12c-b5d1606edf39", "sighting_of_ref": "indicator--b164a227-42b7-4512-b817-5890e29911d2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeee411-9cc8-494c-95c9-cf5e245f563e", "sighting_of_ref": "indicator--7e5e864c-43bc-4d50-bb7d-6a46dae271aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f5e65b-cd54-4cb4-b85a-817323ab3394", "sighting_of_ref": "indicator--5dc15d36-5af2-4202-86d9-fe0086790305", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ff8741-f4a0-46b0-b14b-b6641e4c66c5", "sighting_of_ref": "indicator--b851dad0-bf69-4c2a-a047-776cd4bd4986", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a0c0e1-09f0-4cf1-bc12-d9af246c0781", "sighting_of_ref": "indicator--28c841e9-b13e-4fd5-9f7d-8fd82ad95151", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d68d03e-7cc7-4764-af55-88f36d62219f", "sighting_of_ref": "indicator--0d0e4a84-d337-46e5-ab36-8e97da7a4b55", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a432d95-7769-4f2c-a2a0-be4eea81fdb1", "sighting_of_ref": "indicator--d4179cd2-0ae9-4dff-939c-81979a2ff158", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0abfb2f-98d6-4df4-b860-4abfcf201673", "sighting_of_ref": "indicator--7aaa21d0-bbde-4c50-ba02-5cb74da012b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebd1e0d-53e2-4464-9a03-f877de70832a", "sighting_of_ref": "indicator--330fdcc4-3f9f-4ea7-b0d4-bace2d0da880", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a657aaaa-150b-403b-b1c3-6717308371af", "sighting_of_ref": "indicator--a95b905a-469d-47f6-872e-ae66524209f9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b44bb8-3936-4c2a-9aa9-ed542d309430", "sighting_of_ref": "indicator--dc86b04a-d876-4802-b1da-71b7475e0f5a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c8dcce-b56e-48b1-8ed7-9209a7ac0320", "sighting_of_ref": "indicator--bc60ca50-05f0-48c0-baf1-033caf1cf808", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f784c9-524c-4833-9210-a090adab83a0", "sighting_of_ref": "indicator--cce2e1ad-4e3b-4444-a336-03ea3fdf2e88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b07a0d0-ae2b-4be4-a6b0-8831295db08d", "sighting_of_ref": "indicator--220fe927-92bf-47af-8c9d-6523ea2260df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0f99ac-fdb4-4f6e-8cce-fb44be01022f", "sighting_of_ref": "indicator--3485f62b-ed7c-4c57-a98d-e58558f2ce5d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9b2fc2-e3bc-4afd-aa80-6ee4f4d9be1d", "sighting_of_ref": "indicator--96eb2b35-8777-4565-8b7c-dc4c387c4315", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd82eb4-2f67-47a2-9782-171509725ad1", "sighting_of_ref": "indicator--0b9f9f6d-be2c-4d2d-a104-808db5f1bae7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49ba19c-242f-44a8-be6a-70230640a2a3", "sighting_of_ref": "indicator--436ab37d-dfd0-4bcd-afa0-d0fbb1f55659", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4c40d7-dcfb-4256-a83b-9e7edc77d63e", "sighting_of_ref": "indicator--a327f4dc-95b1-4eb7-839a-8d9acbed8ce9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44581da7-c4c7-41f5-9ed6-4967f7d6df1f", "sighting_of_ref": "indicator--8574da63-fdd6-458d-9fdb-4903846d1b52", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b516a8-eb1a-4e46-8ba4-40f7c696f0ad", "sighting_of_ref": "indicator--da93b3f2-d775-42c3-926b-6759573a415c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f2ca6a-3183-4347-b0dd-7ab4920db05f", "sighting_of_ref": "indicator--d15f9490-5447-4e73-9120-5071a2fb1566", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bc0520-c2ae-4d55-9c53-126263eb5e83", "sighting_of_ref": "indicator--d4c368b6-e56d-451c-8767-1537397d2e1b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12d3654-e554-4618-9330-63673cfc259b", "sighting_of_ref": "indicator--7d3ec099-11c9-4547-ba87-15c93f08dafd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1f3e8c-2431-4dd6-a823-274d5d28005f", "sighting_of_ref": "indicator--6359ec0d-042c-4d4b-9355-7fa7fe526d34", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2473434f-9780-490b-a8ed-858d73e1cbe4", "sighting_of_ref": "indicator--ebc98246-334e-4a04-a62c-dbc0e363ae19", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794a4808-ffb5-4622-8f43-e21e40a69e7a", "sighting_of_ref": "indicator--c91489e0-d501-498f-b38f-03cb1c783e07", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b3f17c-e391-4477-bc56-378872250d0d", "sighting_of_ref": "indicator--5442aa8a-cf7d-4b54-af4a-85cfd5020a3d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d242b6e3-0e7c-484f-8476-a50d1b865ed7", "sighting_of_ref": "indicator--ef4de0c6-abcc-47eb-8f87-cd968bb8b0b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb39624-48a8-4af4-b3f1-a842e952a263", "sighting_of_ref": "indicator--7718f5ca-0f47-4e79-bd5b-7fb010441b37", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eee0e2-11a2-4e5a-bc84-f36b7544d1b0", "sighting_of_ref": "indicator--15d15d6b-1bc7-4194-abef-ad3bc97d3ffd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c1e459-4fb5-47de-9bd6-7f945d469cb3", "sighting_of_ref": "indicator--62ed445a-5da7-4d37-b05a-815261f42a60", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117a2f24-32c5-44df-b223-686110a3f9cf", "sighting_of_ref": "indicator--2ec16b0e-ce0c-4779-b2a9-0f7b117dc260", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d71a799-1bad-47b3-92a4-64a1fbaf8dba", "sighting_of_ref": "indicator--61424948-ac2f-47c0-a8d5-dd5423034295", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9babb6fd-f729-44a7-bfca-69cf20df7718", "sighting_of_ref": "indicator--e202daeb-9deb-4912-9996-6869a25b382a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4efad1ae-2625-4971-b2df-93a7927f6547", "sighting_of_ref": "indicator--d925d38b-d8a9-4cc5-8c0b-28d4ffd16a14", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233f97dd-4239-4b79-91ce-9633f36f836a", "sighting_of_ref": "indicator--dc224765-84ca-4808-bccb-0d4a6c540f38", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fc7508-6c6c-43c7-a641-36ddb3d70c38", "sighting_of_ref": "indicator--bd97c04f-b02c-457b-bd0d-27e1eb7d2f6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55025f6-4f43-43de-8d90-ea48602e5ac7", "sighting_of_ref": "indicator--10dae935-dcf2-4f01-99a1-036bcdb32b8a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f208b7d1-d8cc-45ee-8072-43ee88035260", "sighting_of_ref": "indicator--a06e25da-12ae-44b4-9570-2b89aa5e0b78", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8530224-1128-4ae8-9cbd-3af66515a03f", "sighting_of_ref": "indicator--93fc69cf-bf6c-4dba-a38a-d7457747fc5c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67e25c1-0a35-4d18-a2a3-37a5ea5837c4", "sighting_of_ref": "indicator--3127303f-13a0-4109-af68-b6ec69e5f738", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3486e6-f53d-4c5d-a52b-2462bea77273", "sighting_of_ref": "indicator--91c19ee8-0d07-4b61-b9cb-4b5bc6278147", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28ecab6-e8eb-4f3d-95bb-3ebfb41599be", "sighting_of_ref": "indicator--c8c698e1-c6d0-461e-8f70-ded120ff0220", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d30032a3-817b-46ee-b147-0ece9af5706b", "sighting_of_ref": "indicator--a5d3bb38-cc02-41fa-980d-aaa9cddbffdd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1444a7f3-c980-421e-8bc5-8755fcad08c1", "sighting_of_ref": "indicator--fbe7eb2f-4d7a-4685-8eff-f7643482a8e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c134c40-a8d4-4cdd-a4cd-131ff4c0636a", "sighting_of_ref": "indicator--c0edd570-6b8a-4290-9926-d3c0abadb0ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e569166a-c9e0-4a0c-9f32-9bf48d25cf10", "sighting_of_ref": "indicator--08748795-46c6-4adc-bdbf-911710f87303", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9935b983-8af7-4092-81d1-c9b8d972fd52", "sighting_of_ref": "indicator--5b36c42b-7a3c-4dba-bbc1-d773c7fe0abb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c77d9c-db68-4867-bf24-f352aed9411a", "sighting_of_ref": "indicator--afd40cfb-cf8a-4e52-aeb4-f7309c5df796", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c96b81-7575-42c9-aab2-aafc7e5dc174", "sighting_of_ref": "indicator--ed3b30f3-0523-493f-9857-d0dd233bb982", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8dd339-628f-4a89-8d23-659491f87f12", "sighting_of_ref": "indicator--94a9bc91-7b4f-4c5f-8ef5-d82c1f8962d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378b2336-c648-43b4-9593-bd49e5a310c4", "sighting_of_ref": "indicator--258f610c-77e5-4af1-a7a0-15a8906cfa32", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d19924-f7a7-4375-a164-01edd9e5ce99", "sighting_of_ref": "indicator--e9fc777f-a11e-45f2-8159-a7c759ab4c54", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81963f90-6dab-4502-b407-483a47648cfc", "sighting_of_ref": "indicator--ff781bef-63eb-4e97-9397-8543dca1d6b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--705201d8-fa6b-4997-ac0a-909621424255", "sighting_of_ref": "indicator--83104c29-dc0e-464b-a671-030e574ba574", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b62c26e-fd3e-413a-8ebe-5cba0c0bb985", "sighting_of_ref": "indicator--391c5917-6b23-4669-b00d-c8ebe8066021", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791d3ff3-92d8-4042-a926-2a2f20e7489e", "sighting_of_ref": "indicator--88bce2fc-0216-41ea-bd7a-cd440a9b1ba4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b662044-b6d1-4132-83fa-2a032c735774", "sighting_of_ref": "indicator--3fbcd2bb-556c-42b5-a29a-faf7bca9c3d1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e051e3-970e-47cb-a1c7-2bf3bd7863e3", "sighting_of_ref": "indicator--51da104b-b897-4776-a314-093a5058ce36", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f2724d-a445-4498-887a-dac26bfbfd3c", "sighting_of_ref": "indicator--a477e994-e04c-4b17-8247-241d29b29f29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9641a7e-efd9-4d2b-9342-9d5167d78f87", "sighting_of_ref": "indicator--b2f713ae-d935-4f9b-bc4f-93a99934cf3b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f785cf0a-5670-4d4e-a735-82ab16872ac2", "sighting_of_ref": "indicator--7e95f917-c9f3-4df0-b879-fb01553c2b47", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333777d3-b324-442d-a1ac-a9d928e46e7a", "sighting_of_ref": "indicator--c4ca99cb-25e5-4c97-be77-b8051e2c1eed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1fadc4e-d827-40ce-9fa9-5723ac879e56", "sighting_of_ref": "indicator--97469731-e07d-4ae3-a8cc-c65bb158386b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35bffcc1-50b4-43f6-9933-231a878503d3", "sighting_of_ref": "indicator--156a6675-c439-42c1-9b36-ce2207773698", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21fa2a62-c7dd-4957-b9d3-53646cdb8e43", "sighting_of_ref": "indicator--546056b7-e019-400a-8025-fe0a81a2430e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97af1ba-21ce-404a-865b-8ff5f46cc377", "sighting_of_ref": "indicator--f1576426-4cec-48e4-a4ba-0b4aee55f4cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6635e77c-a3c1-474a-bd11-6bb944bea0d2", "sighting_of_ref": "indicator--fe770c71-4964-4935-8582-c4fa789a32a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--767bfae6-0821-4efd-b314-16260bd41211", "sighting_of_ref": "indicator--8cab4e85-05e1-4ecf-ae03-e95684b2e38b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281fad45-9d7d-4432-9249-60f7c6dd635d", "sighting_of_ref": "indicator--5e8e0ced-3e90-46db-8c6d-607f48e440b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c171964-2050-4e04-82f0-e156cc3b1c82", "sighting_of_ref": "indicator--bc491147-1aba-44f6-af9d-1dfaa83ef296", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e3d4b60-b21a-47c3-950b-2d29397caaf8", "sighting_of_ref": "indicator--2158eab7-6d1e-4f38-ba75-b2d2c619048b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d6d205-8ffb-4561-ad91-a149ae6da4be", "sighting_of_ref": "indicator--33fa74e6-35e4-4d47-ac63-cc8cc0a1d162", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1b5b20-08a0-4506-bfa6-ac86fd7eeb9f", "sighting_of_ref": "indicator--6c950036-a851-45e9-8443-744b9b3886be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b535fd-8bf9-429d-b312-70782e437cce", "sighting_of_ref": "indicator--5d4d450f-53fc-49e2-958a-37bc440c266f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84db0f4b-f429-448a-bdff-ed8ffb5e4041", "sighting_of_ref": "indicator--01a4181f-b857-4732-8e8b-1ed218064a15", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f04ed6-238d-469c-96ce-2f5e4a9aecfd", "sighting_of_ref": "indicator--fd59c790-7d34-40be-832c-08f6ab0129dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4df8b55-ef2a-418d-8669-561496b36c0c", "sighting_of_ref": "indicator--13cce6cd-9722-4339-8fff-98164a15a564", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164ebe19-9c52-4303-b33e-80ab08c0bbff", "sighting_of_ref": "indicator--8dc61e28-413d-4588-bfb0-79687a03f0c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248ca562-1e09-4ef9-a2ba-35d9b9db3ae4", "sighting_of_ref": "indicator--6b5184c0-dd0f-4b93-8cbf-859d2636b733", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c36633-30b9-4398-a82e-75d132070826", "sighting_of_ref": "indicator--d20144ea-1743-467e-819a-a3024aa4cc27", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36eb394-65dc-4000-9805-5726e9a60870", "sighting_of_ref": "indicator--b1a9a30b-6c68-4e6e-9dc7-4e2b2a59c0b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de57fd35-2563-45b3-87dd-eed3df9cd7ab", "sighting_of_ref": "indicator--99692f5a-1417-4e8e-a241-08549b68e536", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a22e6f-f155-4a06-9059-5aefb45fa01e", "sighting_of_ref": "indicator--e89611d6-0130-4421-85f5-e5b770c7372c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1d6521-647c-426c-ba9f-c6108c817b25", "sighting_of_ref": "indicator--4d550cf0-83d1-45bd-8c86-e51b5015a296", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32134239-9f1d-4714-9a85-48d8d850aabf", "sighting_of_ref": "indicator--b2457ea4-83ca-4bd3-852f-63653426af15", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd0ae6d-e5d4-4067-8087-d96f210a6b1d", "sighting_of_ref": "indicator--09bd4a26-cf8d-4d20-9f64-f8de5c953963", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efdd907b-8a86-4547-ac58-462c364746a5", "sighting_of_ref": "indicator--42bb87b4-b243-4299-8657-b22bb9263b6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d9e679-7ff6-4915-a1b9-4185bcb68a69", "sighting_of_ref": "indicator--8e6eb048-ec43-4204-89fb-8eaffb8f8f48", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca6699f-c59b-4dff-a18d-ca9fe169470c", "sighting_of_ref": "indicator--97cf251d-908d-4702-a440-69e69bf7f421", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf546fc-b901-4ecc-a0d9-92b6d148f6bb", "sighting_of_ref": "indicator--913ef852-9130-4ead-85fe-d484f829a14d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bca63e2-47c8-450d-8112-fa184ae4aff2", "sighting_of_ref": "indicator--417e2db5-eb72-4c26-a64a-caeb4f6a1fa1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04c5364-5d91-4451-bd73-363ef07fcf24", "sighting_of_ref": "indicator--e0612bc8-6621-4b58-9981-0c0244e37dce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b03a68d-7b38-4c81-993e-0b53980fd4f8", "sighting_of_ref": "indicator--f12c8e8f-90b4-4764-8ceb-ef0877fb92cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f89224e-7740-4e97-86ff-b1bae1cc0e14", "sighting_of_ref": "indicator--b5d02225-666d-422a-8825-3e277424f40a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b042e3b8-4ed4-4fd1-9ccc-db0d330d7083", "sighting_of_ref": "indicator--c455b590-3278-46b5-8414-35cdbac1a43c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffc4b06-259c-4d31-98ac-cb888c755a92", "sighting_of_ref": "indicator--a5caed11-23db-4d80-bb7a-837702dc0ff4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecddff18-ef89-4e2c-ad9f-c7f0fae6bce4", "sighting_of_ref": "indicator--b6f650fb-af6a-4754-a895-de85c8e09019", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0279c9c-9f7f-4206-8d5c-30b916283e70", "sighting_of_ref": "indicator--56535421-0870-4d97-ac33-759c3494b589", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee8534a-4b95-4196-9b8b-a843a59506b0", "sighting_of_ref": "indicator--d47232f6-9443-4bd9-afec-34cc3ca1750b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e369a8f-3773-40a3-88a6-2744d9f9f6fc", "sighting_of_ref": "indicator--4ba92b56-36ae-415e-892c-50fe1d2853fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f1b536-0827-41d8-afb2-b69ae2bd6c0f", "sighting_of_ref": "indicator--7dcdf89c-7b1d-44ab-971d-133aad30b23e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad392fb6-c151-46d1-bd11-95df2ef35556", "sighting_of_ref": "indicator--4e70883c-7ca7-4a10-86f2-1788c02210fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac722fab-939d-4369-86df-22254847087e", "sighting_of_ref": "indicator--ef1a3783-c98c-4ce8-97a8-c8c7378225f9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44ad245-50b8-41a4-b7d3-0a98896bd101", "sighting_of_ref": "indicator--f3ad39bb-ee0c-45b1-803f-42c9df4b8841", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efcf622-e984-4c63-81fa-23c3f3028c75", "sighting_of_ref": "indicator--1f9a8f91-1eae-40a9-b770-35a79a0bc5a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025c8af9-093c-470a-b178-2516315a7ba3", "sighting_of_ref": "indicator--d50871e8-d612-4397-8bf3-a37339797608", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eecbe595-1709-41d3-9c25-f3edbb3145fd", "sighting_of_ref": "indicator--44b6f0ed-dcb0-4876-96a8-21fcb547cfa5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816c9706-7edb-4374-ad92-c0c7057153ed", "sighting_of_ref": "indicator--596662ee-5b62-477c-86c7-481303e334bb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32452dd8-4da9-4496-be16-003cc0f51d57", "sighting_of_ref": "indicator--88fd6c68-dcad-4b76-baf2-d4f5b40e3659", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae3f5c3-366c-422f-b45f-f5448c90ab52", "sighting_of_ref": "indicator--56a43d6f-6002-4ff1-8ffa-a427abe36ecd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae8db155-0f1e-43d2-918e-b01e5843ba75", "sighting_of_ref": "indicator--8c0498e6-02c8-4388-b43c-225c3f436ddb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf855c61-3d8d-46c8-94fe-937e4a3a5f10", "sighting_of_ref": "indicator--88c5bb4d-dd79-468d-a709-261f3cc0110a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af61b96-345c-4935-95ff-bf3ff8eab0ef", "sighting_of_ref": "indicator--71764eef-27f5-400e-b8b6-a0554c33cc4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee87cc69-4d74-4d97-99bb-7a7b1457e572", "sighting_of_ref": "indicator--76903b97-beb7-4631-95b9-4b80c7c7f929", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc74fb1e-cd0d-453f-9472-60622865b46e", "sighting_of_ref": "indicator--893ee4a1-577b-4244-8d62-078b828e3559", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71788d1e-f6e8-4cfe-98a3-50ebb18de72d", "sighting_of_ref": "indicator--840abb17-b4ad-4602-b1aa-00c36c3d7c13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb873b6-5abb-4f77-be9f-208257f54c06", "sighting_of_ref": "indicator--549822e6-cef0-40e7-a845-d8309de2201c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f809ad9-e8e7-4d81-ad00-afc62ceabc0f", "sighting_of_ref": "indicator--d3ec1dc0-86a2-417c-8818-2605ecaa1daf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c51a2a-3193-4d2a-bb21-a7e3d071fa48", "sighting_of_ref": "indicator--798865e4-c081-4f36-a51c-15dc6577605d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc6a5b2-ba13-44c1-8827-1f4e1aeb1e87", "sighting_of_ref": "indicator--8a79345d-34d6-493e-8d63-2ac8023c2c20", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe040f2-3d94-42ca-9ad8-c77f95406e50", "sighting_of_ref": "indicator--1fb8845f-8476-44e1-972c-669ca2a55240", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da154566-98a1-4778-bd58-6de0020d18a6", "sighting_of_ref": "indicator--c3f7782f-6876-4ccd-ad6c-95724614fa26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1846aa-e338-4bfb-8e54-e59be18eeb97", "sighting_of_ref": "indicator--08fb7e08-156b-420c-b7e5-25797a3e89a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4969c26d-f5ef-4933-a727-09139b276111", "sighting_of_ref": "indicator--f5200f25-52dc-469b-b426-bae3eef349b1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f24fcd0-e49f-445b-9aa2-12bc59877789", "sighting_of_ref": "indicator--390408ab-1101-42dd-bbb2-b72fc0144599", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6788351-bf10-4b96-bd72-8a4efae19109", "sighting_of_ref": "indicator--86ffdbcf-b45b-404b-8adc-2483306f9af0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7e4791-ebd5-4328-9d9b-b526dbdf7c21", "sighting_of_ref": "indicator--189a6b4b-f1ef-4f6f-a21a-e3c8dbc71ccf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22885137-04fa-4705-b5e6-78f1adde0663", "sighting_of_ref": "indicator--e400dd95-936e-451b-9c4d-dc7caf8095e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53888207-766c-446c-921d-eec3823dad81", "sighting_of_ref": "indicator--d0e4e6d6-ceeb-4eae-9f8f-18bed5bd86c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b631e2f-9942-46b8-ae55-cf2ec378b17a", "sighting_of_ref": "indicator--72c0f31a-fbf3-4c4d-8a00-9c292a06176e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c43a765-4aa0-4712-9251-b47d2616fab6", "sighting_of_ref": "indicator--05b153eb-eec6-40d9-bca2-02d8a90d0f00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb2389e-cf04-40ed-ab65-fbcf0d480e7a", "sighting_of_ref": "indicator--7879d0c9-dc4f-4396-a46f-aee7cb6b75dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af956f13-9a52-446b-ad74-8e49eeca8a70", "sighting_of_ref": "indicator--67d8fb61-3e69-4890-89c1-612aeda97d57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67098171-2a87-4ecd-b25e-e4983058cd74", "sighting_of_ref": "indicator--60c57dc9-f7ef-4574-961b-428737d33033", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173bdd53-0e93-438f-89df-d23956b4aa3f", "sighting_of_ref": "indicator--6ac1d1af-ce84-42cf-b4e2-1aa3612e1a67", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f789791-9a74-4ac5-b59c-2ed4e271ec6a", "sighting_of_ref": "indicator--9196e70a-a3d2-4cd9-8025-b4f925bebfce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312e8c45-c7d9-4447-ae00-fbd4e87e5ee0", "sighting_of_ref": "indicator--d2f92b45-5bba-4e5e-90a8-6e9fc4571fb5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f4a4cc-3347-47c7-a4c2-82f270b6f39d", "sighting_of_ref": "indicator--abfebc20-fb98-4f18-ab30-fc5debd0d15e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0aae17b-40e0-4329-ae2b-768995beb549", "sighting_of_ref": "indicator--7f8edf97-3e38-4c6e-851b-c532ff109be8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330ff4b3-d587-4b51-96c7-7da8bc23410a", "sighting_of_ref": "indicator--5bd8c4c2-6235-45d7-bdbd-c9adc6074ce4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbe6bff-ef45-42f9-958c-87f40de2b690", "sighting_of_ref": "indicator--e9c79343-2f3f-4561-b973-4bf191d207ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5496f6c-5ab5-44dd-b107-d637ef52d025", "sighting_of_ref": "indicator--c4ced231-c899-4dce-9e68-605747e2a909", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7806ca7-407a-4578-ae80-8c860d18e9e7", "sighting_of_ref": "indicator--21058c7b-a7bd-4bd8-a6d7-5d649b43046b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a0b072-4225-48bb-8cc1-116db54f738d", "sighting_of_ref": "indicator--0e6397aa-97a7-4fbc-8772-a79b3723fdcc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fcb1c74-7919-4baf-bd4e-e0bd2d970015", "sighting_of_ref": "indicator--af5ffe62-891b-4741-89e2-356fb33b9ad0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4646dd8-1fe1-43f2-9ba8-316bdeed72cc", "sighting_of_ref": "indicator--a0e013cd-d643-4218-8598-f4c898b423b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341ce726-bc31-4e32-8331-7f3f316f7c06", "sighting_of_ref": "indicator--9a548358-d44e-44b8-a162-e5f1ce534b53", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca71a9e-e5f7-4de9-b47f-50d275a6e5f9", "sighting_of_ref": "indicator--a137725b-e9a4-43a0-bafc-945c346aab88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2e0010-a2dd-42e1-a304-f6b91c1a1a05", "sighting_of_ref": "indicator--df7ad649-6056-4b08-9386-ba3128cb2b64", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581320b6-a061-450c-b91a-2b7c731ab9c9", "sighting_of_ref": "indicator--0c340e0f-7cec-49e6-ba60-b2be7459bc04", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c4ac27-a9f3-47c0-b555-5658f18c646c", "sighting_of_ref": "indicator--fdb49315-77c3-42de-bfd3-e40d2c7631c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5106ef-2e8f-4b4b-848b-4ae546a3c4ce", "sighting_of_ref": "indicator--01b9c8b7-2708-4d3d-b95e-0b9a96c26585", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b0bb3a-8450-41cc-92e5-6c09135b29d5", "sighting_of_ref": "indicator--ff5f2dca-3cdb-4bfa-98dd-eb157f8b9a3a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bb8c92-3dc7-4ee4-b407-c761f20f8ab5", "sighting_of_ref": "indicator--b775f99c-d772-4f84-b29d-6cd96e747e60", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55be5a00-46aa-43f7-864c-ba30815fd0b5", "sighting_of_ref": "indicator--d39cc06d-4197-4278-8269-fd4869a438b4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0ff4bd-0c26-4d1f-9d1d-5601a34fac9c", "sighting_of_ref": "indicator--15e87c58-facc-4f06-a5d5-a80f1556f12f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8234a760-1484-4a01-874b-1270d2554d78", "sighting_of_ref": "indicator--224c2aac-32d6-49d7-8c88-5d27a253c3c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c323f8-b700-4842-86ca-c0cf83b759b5", "sighting_of_ref": "indicator--0cb9795c-0668-42e1-b08c-208a788dbe01", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90e84b3-67ad-4379-a1de-eddec770acaf", "sighting_of_ref": "indicator--f3fe2d18-ee16-4fcc-a8b0-9927b6b1249c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2972a41f-5858-4625-902d-8414f2cd9279", "sighting_of_ref": "indicator--b6264fe6-6da4-45e5-b993-0aa00f952690", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197d9282-9252-40ed-9237-6327f676ba07", "sighting_of_ref": "indicator--ed194aff-11dd-45df-bfc8-634c5813653c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99790d4-c24e-4388-a3a7-26ecf2ff8ece", "sighting_of_ref": "indicator--c892469f-12e7-495b-8c66-b9be72da2cab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770407c1-6737-43b2-b760-ab8af8910dd6", "sighting_of_ref": "indicator--05a4c78d-9df6-4139-850c-53773b5d7f33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef3a4d5-9521-41ad-a43e-13d6744b4802", "sighting_of_ref": "indicator--46b81ea6-ca8e-44e0-bc22-daa57c47e92a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ae6371-8382-488a-a809-58656c9ae277", "sighting_of_ref": "indicator--b6804623-7608-4a4d-b0ed-842fa7f0a137", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbca25fc-fa20-4da3-8e2f-6fbfba5e7cb7", "sighting_of_ref": "indicator--7848189f-b01a-4986-b589-6d67a0e78f78", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d22c29-c7cc-4b7b-9fe4-b5de06837336", "sighting_of_ref": "indicator--473e7b09-1cf9-45dd-9d4a-f30d78863afb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b5b833-603c-40f0-a838-00dbc2c2f239", "sighting_of_ref": "indicator--bf8e6091-5c59-4604-8215-5778224c8f7f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a277ad0e-5669-4894-bef2-2fafc4da4dc6", "sighting_of_ref": "indicator--c35c3541-92cc-4f9a-ac72-5065cad08da0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ea83e3-5f4e-432e-81d7-a05ffd7faf1a", "sighting_of_ref": "indicator--a6cbad22-808a-43b2-89fb-ba57a5487cac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec9405a-7bf9-4f80-8a3f-7fbc216ff94c", "sighting_of_ref": "indicator--a05f355d-d403-41bc-b183-ab6d8112787b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c778449e-cc5a-4e3b-8889-c89d49a18073", "sighting_of_ref": "indicator--c7ee3149-cef8-4c2a-ba72-4b9427caf84b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b2dd31-ef79-4e59-8e8e-61129516d15f", "sighting_of_ref": "indicator--69fdd51b-45e2-47ae-978d-b9c9c054b6b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2322f53f-194d-459c-9e6c-8d12b0cacf77", "sighting_of_ref": "indicator--6a7b179f-5b02-4f97-9017-a9840d61c092", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893faa78-0859-4622-8bb3-be2097469a7e", "sighting_of_ref": "indicator--19a2234d-9c29-4fdc-acef-1535cef2b04a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdcab90-0c61-46a2-94d2-452c7f877a8a", "sighting_of_ref": "indicator--ae7a06e1-6b82-4311-8f8d-b187719a5af8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc62a7f-2bc6-4a57-8baf-e4e6fb954e0d", "sighting_of_ref": "indicator--e96160ed-5b85-4f1f-8cf3-1a54ee5e313b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb49bd5-c16e-4a1b-ac59-346a2a30c8fb", "sighting_of_ref": "indicator--8535bb9a-6533-4aa7-9e14-215e11160677", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6ab7d0-4add-4e82-b9ff-24c888069b24", "sighting_of_ref": "indicator--8740e587-99ad-4ab4-a8a4-a3e416795af4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98212ee-dd7d-4695-a3d3-bf7169018639", "sighting_of_ref": "indicator--bb3e0c3c-136a-4be4-bd5d-3b244f62f6ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34602cb-e8e5-46de-a047-e2ae276201ee", "sighting_of_ref": "indicator--b118d87b-5cee-4519-825d-6d9044e1c285", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3e8070-89e3-43ea-a958-6e081dc2ebee", "sighting_of_ref": "indicator--8cfed0e8-af63-4505-9e02-d480aace9f68", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46342643-3259-4eb9-9dbb-dbe0d63d26e7", "sighting_of_ref": "indicator--f3920d6e-2c82-4969-a1a8-8d37d4c3391b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6feb162-6613-4674-83ec-60d78cd1c840", "sighting_of_ref": "indicator--fbffb555-1941-49a4-94fb-746e0ef9ec94", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea9a399-6561-4d4f-816e-161d6eec765f", "sighting_of_ref": "indicator--b415952c-7687-4a6b-8be2-cbd023ebd74b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e651b6e-ac43-430c-ab96-b860c8e19626", "sighting_of_ref": "indicator--45fb1c1e-e161-4dd5-829f-6a9f6aa71e62", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d604e44-59ef-4e99-ab75-6f26c9e79fb4", "sighting_of_ref": "indicator--e89bfbc4-77f1-47de-896a-cc80c0150f5d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a454b513-b961-4f28-b573-8480854b259e", "sighting_of_ref": "indicator--7d05390d-08ba-4c7c-8997-34a2f9f49516", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd62ee19-d8f0-428c-bb1a-a80b608d8914", "sighting_of_ref": "indicator--b4288b08-ebde-4b84-90a1-390a686e97d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328c8a87-ed9c-420a-96be-308a86a30144", "sighting_of_ref": "indicator--3f8f518c-cbea-4c28-9d87-026fd8f0c0ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--199211ee-d1f6-43cd-b342-4e0679320183", "sighting_of_ref": "indicator--656891c1-90dd-4ca9-9a6c-a41745d89e38", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e79fa12d-5e23-4497-bbb0-b9ab1ee77618", "sighting_of_ref": "indicator--6da5e6c1-1a59-4de8-b7ef-249b9e63d9e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22d3bce-d4c1-473b-a9cd-0c14e0d8fd86", "sighting_of_ref": "indicator--48c0a363-7978-445e-9a81-d57b9d476f24", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4848af4-f0e4-4725-bec4-126ae8eddef6", "sighting_of_ref": "indicator--bfc5e8a1-e008-4216-95f6-57ce8141c467", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b6cb2c-e0a3-41d6-9401-7a770420a054", "sighting_of_ref": "indicator--adb94b3b-8dd1-4807-96f7-4d94f291c1cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154d8a72-90b1-4698-9eb7-a474946563a8", "sighting_of_ref": "indicator--ce5c5300-d283-4e1a-97ba-bf730ff7b846", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b875cc30-328f-44b1-b1e6-83cea05cf93a", "sighting_of_ref": "indicator--c316ecd2-6209-4a6b-99f8-973ca337501b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9764148b-7b33-4555-948c-cf21497306e7", "sighting_of_ref": "indicator--4487cd2e-5d2a-4247-9f48-fd0f32c758f1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b80e120-ef66-4470-a4df-bde79c007aa5", "sighting_of_ref": "indicator--b42dd7c6-bd5e-4bc7-bb41-be339a7b6a94", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1d795f-9dd3-4e20-8829-cac115907b43", "sighting_of_ref": "indicator--36bf4a4b-e1b5-4f40-9348-abea320fa9ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654c526a-8106-4836-8cbd-97032ca64ac7", "sighting_of_ref": "indicator--d41b7b13-9429-4c06-a556-de4673623925", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eef60f5-7b7e-4382-92b6-a5a7f8c1e9ef", "sighting_of_ref": "indicator--c7fe5f5a-c9d2-49b9-a0d1-4c278c7400b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee3136a-2043-49e6-84fd-883c3fb69c2d", "sighting_of_ref": "indicator--8229c899-78cb-4aa0-9877-4e50372d72dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60f19e2-97d6-47fa-9e0d-31efe809a0b7", "sighting_of_ref": "indicator--90cca22b-40d6-4b25-9a29-e5dbaab4318e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f699dda4-acd0-45a9-88cd-0c09ae255034", "sighting_of_ref": "indicator--d6c5bf50-d584-41ef-8ef2-555d57301d33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5f5ba1-391b-46bb-a3d6-3d4c99fef4cc", "sighting_of_ref": "indicator--8e9c35be-c31d-4079-b5f6-2d49f206e10d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2098787-3944-4d83-832c-579e8039e7b9", "sighting_of_ref": "indicator--daec7430-efbe-4d40-b076-dfd1275906e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f49e19-1326-4f0c-9bbc-61aa573a7111", "sighting_of_ref": "indicator--e2164004-9eff-46d1-9622-36011cf9911a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c31c79-cc2c-4fa6-aa01-e2474a363154", "sighting_of_ref": "indicator--a290778e-9e22-4582-ac41-a9f54e9d0b6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e7e732-9a65-4ba3-aeec-161b58e585bb", "sighting_of_ref": "indicator--161331cd-524c-4bba-a51c-29814e8a9b9c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cfca07-1430-4c35-9d4e-ec01c6c953fa", "sighting_of_ref": "indicator--623008c4-5a17-43e1-be94-4cbacf255c34", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb853368-c14a-40b3-ad22-b952465938c9", "sighting_of_ref": "indicator--1e6e5240-1033-437e-a41b-1a983a411589", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e864b274-bd71-41db-aade-945cc1f3d349", "sighting_of_ref": "indicator--be0f183c-292a-4dea-bb3f-dc1a1450b5e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36319a1-7bd6-4ea4-867c-950f018fdc62", "sighting_of_ref": "indicator--657057bc-4a56-49c7-a5cb-b8faca856fa5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9f9531-68d9-4e18-9086-4365b5b7ad71", "sighting_of_ref": "indicator--41f6d07c-9bb0-4558-b3cf-c143516e44de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957cfb56-13ed-4686-9dfd-9baeb078510d", "sighting_of_ref": "indicator--ba9b990b-fffa-4e0c-8184-2482f9abcbec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85815db8-dfa5-4f17-84ac-684aae21511a", "sighting_of_ref": "indicator--538ba727-26d0-4055-925c-14de0da0df80", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8eb9120-953a-49e3-ad9b-66dc73a4332d", "sighting_of_ref": "indicator--e48416f9-2213-4311-8d99-ef0b7fcf2526", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78bead7-515e-471f-9a27-12e6e7b755e8", "sighting_of_ref": "indicator--345b4eb9-dad0-4545-b1a6-9b750aaffe8e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec76e6c7-9f09-468a-9c08-8b0816f47c66", "sighting_of_ref": "indicator--179e9db4-95f5-4cab-bb39-b8c34a1cb3a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924a9d3a-c7b0-409a-a448-ac7282f7908a", "sighting_of_ref": "indicator--5d15dfbe-29ab-4c86-bd49-9638603b35c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f1e8a1-1c98-4dbe-a2f8-52f444bfce6b", "sighting_of_ref": "indicator--ee6c2497-adef-40ef-9363-c6d2c65ef1bc", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e47bbca-5d24-4f09-846a-983e01d5dd88", "sighting_of_ref": "indicator--748febcf-2f33-4790-add2-272d713e035e", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a135203e-97c4-4d52-942a-5dfa36ac1661", "sighting_of_ref": "indicator--854506d7-eda3-40fd-b817-7f297bbb986d", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f92a698-d7cc-4b7d-b5ac-456fd25807a5", "sighting_of_ref": "indicator--64f541e1-4114-45cc-a01f-fd66b5dcf1c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a03f62-535f-4710-afe1-9d06f37c1b75", "sighting_of_ref": "indicator--5fbfb24d-0e51-46f4-b216-bd245e761ff7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58189461-015e-42a9-9fe5-92afffc87e1f", "sighting_of_ref": "indicator--b671922a-2808-4fd0-bc09-1a57cdac7e84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d19dc87f-2764-49d8-a394-962f0e3563c7", "sighting_of_ref": "indicator--0a4d5796-8418-443d-b9a4-df4edb563c8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c3add4-1969-4989-a95d-d3a465b3315d", "sighting_of_ref": "indicator--5f3bb3f2-3b49-475c-843a-c1cf7316b81d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c779c15-5eca-4905-9e5a-a7567459dbf2", "sighting_of_ref": "indicator--482eab46-fd94-46d8-81d1-fc4f771ca655", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7080bd3-bc15-4392-913a-f8d10237ac21", "sighting_of_ref": "indicator--9841a264-f084-4132-9456-e1939ecb54c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b277b6e-2489-4f54-861a-89478cf30a9f", "sighting_of_ref": "indicator--2ffba22f-6e92-48e6-af52-c9ef3e491b0a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f623773-c1c7-4089-b38b-fb5c4b2a69f3", "sighting_of_ref": "indicator--7583ee11-6bd9-4e43-90e9-d06af22dfe94", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc66fbc5-1585-4f2b-8473-31b9670b9b29", "sighting_of_ref": "indicator--ed69cf5b-969c-4454-a456-f0da63bff53d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d43ee1d-5d48-4ea8-bb3d-6865c96dcf25", "sighting_of_ref": "indicator--088c61e5-4bfe-4ed9-a2c7-f271ca2da29a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67406891-9532-4cce-b651-87dda6b65514", "sighting_of_ref": "indicator--81747e15-a351-417d-a305-084df7d39251", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3d8699-f2b8-4295-b7f9-cf91e011f5dd", "sighting_of_ref": "indicator--d403bcc7-3e43-4e63-9ec1-eb02bfa2b607", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3d6d84-6f02-494c-9a52-518ae255a94c", "sighting_of_ref": "indicator--4c994c65-aee7-4c0f-81e6-ebc1170882dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9d2fb0-9387-433e-be1c-43fe886550e4", "sighting_of_ref": "indicator--302c459e-18b5-4c95-aa36-21b80e863ce9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e34059-1273-4716-b362-2b25b301ddbb", "sighting_of_ref": "indicator--4b535c24-7d58-434c-8284-788b6835dd75", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--381f1c10-49c7-4276-a870-1dedc7d0a6d4", "sighting_of_ref": "indicator--71b911d8-4f53-4a79-b802-dd4539d52800", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66dac9a8-f659-4f2f-8dfc-ff3c358cf9fc", "sighting_of_ref": "indicator--de2c66b8-82d6-458b-97c4-52b65c175e88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa8d041-db29-4d6e-a28a-9e973e930af2", "sighting_of_ref": "indicator--04c0f7fd-7790-42a9-9602-74db04160cd5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331b4e03-b27b-4ae4-8b4b-27ad3bf3fc25", "sighting_of_ref": "indicator--1399bca6-9920-47b1-a02d-7330aab6ac9e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d96559-9c4b-41a8-b58c-b2892c5572f0", "sighting_of_ref": "indicator--2c170e7a-fe1a-4090-9ed6-d42c2f0c1fbe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c699ac56-0bc9-492e-b0c3-b6a826033661", "sighting_of_ref": "indicator--fe84ee15-8325-4f73-9c8a-ff055f81b48b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf6a6ae-fbc1-4a25-87a6-9ad3683e7985", "sighting_of_ref": "indicator--f6c04bb7-25fe-47b7-82a0-aa3c119df395", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a154aa92-639f-40a2-a621-a099ed119d4f", "sighting_of_ref": "indicator--6567b55e-80a6-4a8b-bf13-b0543b2813be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd4fb5d-10a0-4488-9204-b5c83c80e0e5", "sighting_of_ref": "indicator--5929dab2-dd05-42aa-b5cd-c0aaeb464982", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bebbff-d91f-43b9-a582-328671d21d6b", "sighting_of_ref": "indicator--0f107507-9782-43da-8c75-5d2ea9a39c5c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a618a7a-926e-45bf-80f9-255b1433fee6", "sighting_of_ref": "indicator--b14ac01c-60b2-48cb-845a-9614c5f35d9c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c139956d-1434-474f-aa57-96a10cd866fd", "sighting_of_ref": "indicator--8e7776ef-ed84-4763-9971-6cbc6777ea99", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3de98ea-5450-423f-84cf-c08de6375f11", "sighting_of_ref": "indicator--24264ce8-2516-47d5-909c-4208e6b7c8a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa93d68-ace6-42bf-98ee-d03d2301e502", "sighting_of_ref": "indicator--445672ce-c1f1-4100-8751-bcec5b1866b1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09725d66-4be4-4609-9444-ec05b41433ca", "sighting_of_ref": "indicator--87bb122b-0e7c-4d0f-a226-379f5116b3cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e14102f-f7e2-4ffe-9ffa-cc50650539c6", "sighting_of_ref": "indicator--db33026f-cbb9-4015-a2cd-0aa2bc5c30fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9d9f13-f8ea-4d2c-8b37-f686f4b1f827", "sighting_of_ref": "indicator--e2cc9af7-6277-43b5-9d15-a8e6280a4970", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c4f5af-151f-4569-ad0a-7a7ccf4a73e5", "sighting_of_ref": "indicator--bb191e64-d2e6-47ee-b715-970783709f0c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc528c2b-41fa-444f-acff-bd163f54e95c", "sighting_of_ref": "indicator--2c8723e9-c563-402c-9c94-9fd53e84bab8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed93890a-31c6-42a2-bb97-e1f0d5ea6586", "sighting_of_ref": "indicator--039b99bd-6df5-4f21-9b75-2b0028c6fc2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2af8cf-363b-48c8-bf05-94df0af1e262", "sighting_of_ref": "indicator--6c3d193f-71d3-4d03-ad13-7d2923a824b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1261ec-a93b-4e79-a685-c9438bb9cd4a", "sighting_of_ref": "indicator--d2a1391a-cd59-4e1f-8049-d562f0932d96", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3a9c73-5536-4e11-8cce-769d9ad61d84", "sighting_of_ref": "indicator--7569e39a-b549-4073-853c-cd6575974aa1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5c96f0-852b-46ce-a9f6-05bcb40aab26", "sighting_of_ref": "indicator--12534dec-25dd-4b3c-acf7-e61ab7a80f36", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbd41fb-8e73-458a-8052-dc7c03c7d030", "sighting_of_ref": "indicator--ce49809d-960a-4e0e-918f-0c861cfa51e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b80b9c-5920-457c-8ba4-7a0dbbfc89e9", "sighting_of_ref": "indicator--61353250-5c0d-42ee-972d-1d2156aaed71", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744259f6-a173-4c9d-9634-178f1f800303", "sighting_of_ref": "indicator--074c39c0-c311-4637-9e31-d5845f285b4f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd58466d-abe3-49a8-acc5-cb8787c48a75", "sighting_of_ref": "indicator--87a75770-69d5-4949-a30b-a246c73648dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c01e5a4f-e62c-41c1-96a5-9aef54537247", "sighting_of_ref": "indicator--c5fbfc26-e053-409e-a6ca-e9d020712246", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fdf21c-ba63-4b40-8e2c-36227b08cd1d", "sighting_of_ref": "indicator--0fa5f3f9-dcc0-4262-be2b-7d1f1e9199dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8934f86f-cb23-4815-83b1-9e141e559277", "sighting_of_ref": "indicator--edb83053-9989-4179-92f9-6003b45a29ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca7de13-6511-49fc-bbc5-28804b2d07ed", "sighting_of_ref": "indicator--7a4f76aa-ea26-440a-a865-afeb7a5607ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd0a43b-e16c-4b96-8404-48c18597c846", "sighting_of_ref": "indicator--731f111a-e5ba-483a-82b0-51a23649172f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955fb6a2-8d95-461d-aa34-513a3078f6de", "sighting_of_ref": "indicator--869d6a7e-8d12-4a12-858a-32410be4377d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef61f2f-daaf-4d07-9cc6-1145c82d51c7", "sighting_of_ref": "indicator--87621c95-a497-4e1d-9c40-38a5fccaf3dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302315ae-c4d4-4d13-b060-d2bff28dab95", "sighting_of_ref": "indicator--a9c87323-85de-4f65-8552-c984ccb7eec4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ceb629-a500-4ea5-b5b0-07fce8e841a8", "sighting_of_ref": "indicator--241ccc6c-e7d3-4c0c-8ef1-b50226dc57de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f9d2863-d43c-4c81-95e5-c3e9e9a1b1bc", "sighting_of_ref": "indicator--1a37a80b-8aa9-4012-9428-90e59925b0ec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55ffaeb-a7ba-41bb-9fbe-79f82aebc404", "sighting_of_ref": "indicator--1c3cda71-6f8d-49f5-98f9-6c2783184391", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41121f06-b81d-411a-959b-f2dc9d5550e9", "sighting_of_ref": "indicator--7f6d7918-7f71-4d61-a56e-b1cec675430a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55702a8b-7b68-4cba-bf7a-57f0a8f30ec5", "sighting_of_ref": "indicator--9b440677-4a46-4fbb-89c6-f537a6a35ccc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c81737b-ac8f-4711-88ea-dbd7a6353187", "sighting_of_ref": "indicator--104dcccd-3610-4851-9aeb-b21c7aae5852", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294037ed-e646-46cc-94d7-6f891472fc8d", "sighting_of_ref": "indicator--84266f87-746a-4572-8e95-7901ec275385", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfae984-41b4-4384-b8b8-25366cea27ac", "sighting_of_ref": "indicator--f825336f-25ba-4cf6-8dd4-b6d1e8bc5848", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1da3086-721b-424a-8780-4aaf92ac9162", "sighting_of_ref": "indicator--82450243-c760-4bd6-a19e-2edef9454278", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8c3e31-3cc3-448c-b34c-66555317f4e8", "sighting_of_ref": "indicator--c3169e01-2f78-4929-9851-c8ef6f06627e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaec270f-2317-4672-b710-756e5bcbddf6", "sighting_of_ref": "indicator--7e23288f-026a-4bd1-aa0e-091a5229235b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d085975-eb17-4ed7-a0bb-f4f726a33d77", "sighting_of_ref": "indicator--16eaadfc-e63c-4d87-8bd4-b67df10d8c2b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c0f632-da60-48b4-bb90-3813ca3482a2", "sighting_of_ref": "indicator--d8b387dd-4f0c-4d0f-8f59-ca4e3819004c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584ec3a1-e3c2-4979-a38f-649f5b5ef98f", "sighting_of_ref": "indicator--2da40959-8aef-4171-879b-ca68d76bd534", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1e1477-708f-4fab-b4f8-635925c23df1", "sighting_of_ref": "indicator--dd2476d0-105b-4faa-ac23-927a35db9c28", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ccbabfc-5bfc-42e8-8ec1-21e994bef984", "sighting_of_ref": "indicator--e9baaeb3-eae3-4509-8cbf-d69ffc1bf3d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa16025-8bc3-4366-8c6a-adcb45126c0f", "sighting_of_ref": "indicator--4825db97-8e80-48ec-82dd-35572ae8034a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36089f9-ef82-4f8d-ac88-42ffcb3101e0", "sighting_of_ref": "indicator--64645d29-aded-409a-94e8-ba64f7b11611", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b53ac2-24ce-4df8-8f0a-cf523f8d5838", "sighting_of_ref": "indicator--6119ac00-5744-4acb-9eb3-80bcf50b852f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ad9c0b-1724-4be1-a1b4-cf3b558c2abb", "sighting_of_ref": "indicator--8bc9a65a-9d38-4af0-95f1-2ed1d0c17388", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448d5687-68e6-4a12-bc06-6bb7619171d3", "sighting_of_ref": "indicator--50c2e58d-c8b0-426a-adf5-7878ae1caeaf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1666d7eb-4504-43d0-bf5a-b1e00ab77681", "sighting_of_ref": "indicator--02715822-8674-4dd3-a36c-095994f331d9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec32e4d-b0f9-44f5-9575-b82735033109", "sighting_of_ref": "indicator--8fb71bb6-9671-4a17-b352-7358ee8cd79f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf7a916-3228-429e-ae59-f2aaea521ae0", "sighting_of_ref": "indicator--89ab7401-f306-42a7-8afb-99310909ae5e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a0d31b-1f72-4bde-92d3-e4b99a54c35e", "sighting_of_ref": "indicator--b924471c-b061-440d-abf6-cfd86f60f10d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2783a6ae-415a-44c5-82ce-b8e196d7210d", "sighting_of_ref": "indicator--b66bc1f3-e9d7-464b-91ab-b560111f6565", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cfdecd-819f-4cd4-8b72-214556564f39", "sighting_of_ref": "indicator--52ec8500-74b1-4795-b0b8-d1812012483f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8ee53c-54a3-46e2-af4d-23702c941e39", "sighting_of_ref": "indicator--6b8e79fb-8ebc-480d-b741-79c915d6873a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5e5f4c-96bf-4c52-93b0-ee1430dbdc4c", "sighting_of_ref": "indicator--2e16059e-bd83-44f8-963f-0725b184bab9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc3d6db-09d7-4bc9-a3d6-ca321b06199e", "sighting_of_ref": "indicator--4ccf1592-9d3b-45ce-92f2-76db961370fe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a09fd98-efbc-42a1-a8d8-198f3284b79e", "sighting_of_ref": "indicator--364fbcbd-a18d-439f-90b6-de510f646eef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3687a6c5-017f-4021-b6f5-454cb7c6d8a2", "sighting_of_ref": "indicator--cbca6d95-7fe9-41d4-8eb6-d9132a8a767b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e630e70-e234-4475-b908-cb9e42a2654f", "sighting_of_ref": "indicator--f6c0795d-508f-489e-8c85-7a1ead9b8016", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ac8093-2d05-4f2e-a003-a08e98588231", "sighting_of_ref": "indicator--7b1bbcfb-dbae-41ab-8ab1-bc22a50359e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc039e37-737e-4a21-83c6-fb2585b1e360", "sighting_of_ref": "indicator--b2e437cf-9051-4574-8ee9-6015bc7e593b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1d1fef-4f63-4b6e-ab28-e157b93db90b", "sighting_of_ref": "indicator--ca442de7-c910-4749-aa10-e76669b6c1aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906df549-1044-4632-af25-dc8bce662ed5", "sighting_of_ref": "indicator--e70d0d9d-3746-444f-9873-95d9c9371dc0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f49205-2b16-47e3-9a48-f624d67b6c8e", "sighting_of_ref": "indicator--76dc0eb9-7f0a-4010-94fa-cf1be5b43328", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5ce6da-1dfb-44a1-a417-6a0b9443fe55", "sighting_of_ref": "indicator--b1fd015a-bfb7-4c2f-a03c-865f8f835603", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13925b5e-084e-457b-96b0-9a11c8902fca", "sighting_of_ref": "indicator--e31d284e-b40c-470e-b014-adc064e96b96", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e454016-6d58-4546-8b1d-afa666766388", "sighting_of_ref": "indicator--826538bf-85ce-4742-8ba9-73003cc82d1b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0365f5-0ef7-4a6e-9852-f259b2b97517", "sighting_of_ref": "indicator--2a756f40-5809-4fab-9110-1874734f5d33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bc2737-be43-49ef-a98b-e716f1d57738", "sighting_of_ref": "indicator--d2725fed-ca28-42c9-b0a9-c2ab1b490431", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8d6a2c-a4f0-46a9-a634-ce353e5bcf6a", "sighting_of_ref": "indicator--e4a18a79-4cce-4585-ae0a-dd207dc3499f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2754742-46a3-4f4c-8106-da37b1f6a617", "sighting_of_ref": "indicator--8db27f28-8bed-44ce-9dbd-1434125530c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afd534d-cfde-4b91-861a-8310951cd46e", "sighting_of_ref": "indicator--f1a61452-8c4f-4b09-8e60-0d13701b357d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46492aa-86d9-42e6-b083-f2d869b4fe71", "sighting_of_ref": "indicator--88c28611-aea1-4ef7-ad13-710711a17040", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf911ce-360a-442d-afbd-d16c0d6e66eb", "sighting_of_ref": "indicator--ed5768ad-06f4-460a-9c4e-b68a40e5278c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb70451-05d0-4d52-842d-516f9aa55d83", "sighting_of_ref": "indicator--2e9eed8a-204d-4172-bde9-15dab2c008de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c1cb9c-abd6-4099-8acd-bae958d36742", "sighting_of_ref": "indicator--f2a36618-2fa5-48a5-85ee-5e2515a77820", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7df5aa-b177-4a00-a426-83ef4233b1ff", "sighting_of_ref": "indicator--ecc6deb7-3dd1-4c5d-b1f2-958a49df521b", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb935b73-578a-4b94-a80e-24cc37668ca0", "sighting_of_ref": "indicator--7e533a94-1959-4ea0-b733-7fb92f3664e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b419f9-47ee-454b-8b74-6128dfcf4415", "sighting_of_ref": "indicator--8ad96528-3b80-4e75-aa83-89450df3c61a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7107e4-dd40-4484-bf08-76a14ede590c", "sighting_of_ref": "indicator--1cf14b45-770b-4315-8a4a-813f8c5b2b80", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a052318-81af-467c-9fc0-77e2a4d35609", "sighting_of_ref": "indicator--2c6aeb23-0d00-4b3e-8810-a76deb62684e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f44eb2-7538-4f52-b829-f0cc08d50d8a", "sighting_of_ref": "indicator--e0dc1aed-1968-48f9-957d-d42ff61877ed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f355f550-fcad-4223-9409-1edc54a3f215", "sighting_of_ref": "indicator--c0f46b42-f1c2-47b5-94dc-8d792d50aac9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a303cdb-ea7a-46b3-b191-3f14ee7ae983", "sighting_of_ref": "indicator--4e473af2-6049-4b5b-8706-813c508fe83f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f178da1-9b99-4752-99b8-033401c646cc", "sighting_of_ref": "indicator--b966495e-bacf-4337-a0d2-5a8a62655df4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309f4984-3134-446c-a5a1-f73b6ba342d1", "sighting_of_ref": "indicator--86e72b33-a151-43a9-ab8c-20ce3fe34b02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842f94bf-5a67-43c2-ad4d-d7e9cb8aed20", "sighting_of_ref": "indicator--79fa893e-cbe7-4d01-a73e-70d11b86c208", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212f105c-5c42-407a-8cc7-8a4cd86378e5", "sighting_of_ref": "indicator--66d7cbac-45f8-43d9-aa81-79ede618f96d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873fa791-cba9-4643-a0df-36269b2fd45f", "sighting_of_ref": "indicator--25c8d88f-c6ef-4c11-9a30-16fc7738d5b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f66369-ba1d-4386-8660-f8e042e7ce73", "sighting_of_ref": "indicator--7d341e0b-4995-457e-8bd7-d324baf08970", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6f1105-d032-45c4-922d-7c1254012cb1", "sighting_of_ref": "indicator--bd4e5b20-4109-4792-9068-5e07ff4375b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c640bab-164e-42ff-9d1d-5cdd2e47e76c", "sighting_of_ref": "indicator--bfad2e30-b0e2-40eb-a284-4d5bdb8f7fd3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9647d246-c788-4e48-bef7-2db06d67ba7e", "sighting_of_ref": "indicator--f1693de6-6467-4311-82dc-eb9c58ab70e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e746edee-9ed0-4f7c-b005-29e9495f1372", "sighting_of_ref": "indicator--fb379b39-5b7a-402e-8a9d-847794681980", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cfadb3-43e9-4254-a7c1-6f2b7d88e05d", "sighting_of_ref": "indicator--c1f9bafd-52ba-4835-a7d4-bcfec5681aad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7643a967-5126-4011-9d0a-90751331eeaa", "sighting_of_ref": "indicator--67832d78-cba3-48c8-ac99-d5518ff9b06f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6459b2b3-e33b-4528-876d-81be761470a2", "sighting_of_ref": "indicator--72190f8f-115d-4ee7-9c93-c27be57e10fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a5f5b1-2ecd-477d-ad3e-63bf432109f2", "sighting_of_ref": "indicator--bee0d89f-5a57-43ba-9316-4ab7c8c3d80a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab64eed-6e5c-465e-994f-eea277f78298", "sighting_of_ref": "indicator--bdc5b182-d152-4803-a543-3c47df1f4c2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914ac01b-710b-4e89-b53c-d6655d88f571", "sighting_of_ref": "indicator--d7ca296b-7030-40bf-9fb2-35a91dad34b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8c863f-a80e-4d1b-8641-11ab5af64d5f", "sighting_of_ref": "indicator--f8822798-c2dc-4bde-880f-2b4c60fd4a49", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc74159f-e25a-4ee3-bdbe-90e282b63b5f", "sighting_of_ref": "indicator--9c54a3c5-c6f7-4c3c-9df4-83da7349ce77", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b1f0b8-0472-4dd1-b475-c76a1ccdf122", "sighting_of_ref": "indicator--acb36d0b-5b6e-4420-a5d3-475e3a559c6d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8091751-1f42-4e24-9182-eb479d6a7a2c", "sighting_of_ref": "indicator--dc4f3e8b-40a4-4a7c-9014-12c5343c8563", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc53855-ddbc-40b6-a94e-4058a9e4b1bb", "sighting_of_ref": "indicator--4fc7d38c-c3ae-49f4-9dad-1b1598377874", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44519bd5-c190-4eb3-9684-c389d0525fb5", "sighting_of_ref": "indicator--888022a2-7964-49b3-ac3b-0415ba672fb0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c86c35c-4812-42f0-bed2-1fa0e4d1de38", "sighting_of_ref": "indicator--6b726a67-cea5-4314-9458-1defc5556e87", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76315933-380e-46c5-b76d-2c78074c690a", "sighting_of_ref": "indicator--630ee99b-ea8c-4a15-985e-452f11c84248", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4d01f2-5f2f-4cba-b113-18878fc7ec11", "sighting_of_ref": "indicator--0c978b77-65c8-42aa-b7a8-7ab0aef03dd4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf6b2a8-7be2-495d-bb55-ee8066fef58d", "sighting_of_ref": "indicator--ddf6b76a-bd8c-476c-a947-2b14ba8c9dbd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591f2ff0-7c7d-4649-bd61-db497b88d92a", "sighting_of_ref": "indicator--00b4366d-76cf-42d9-b05e-c5e16cb8ad43", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cae5b08-0e2d-45af-ac73-731ea23b5396", "sighting_of_ref": "indicator--6d6ef183-1e58-4f25-8f29-ffcac789a47a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12483d0-f44d-4055-b74a-a6138b37dd24", "sighting_of_ref": "indicator--1fb25f0e-f243-4e60-bedd-71286728b01a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdb0d84-ae10-49bd-9e87-bb579c57772b", "sighting_of_ref": "indicator--fbdd2f9d-8192-466c-baa7-ef9f366ca321", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6495ad-cd63-4ff9-992e-76ac91f85866", "sighting_of_ref": "indicator--c0d25043-1f17-4942-8326-5cccb922a7c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aeb8600-37e9-44c7-9bd3-5dbda3e42a5b", "sighting_of_ref": "indicator--921ee051-110e-4540-88f7-b1bdb67e0981", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cff59ca-2ac1-4cd5-9956-682e18abea5f", "sighting_of_ref": "indicator--5910d5f3-ba22-43f1-8187-c146cb111809", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c43515-fd8d-4d8e-a598-a471ebfd7686", "sighting_of_ref": "indicator--057a5b0b-7d9f-4b50-941d-7111cbf205a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10fc7be-be85-4f38-b5cd-f070c74f9c78", "sighting_of_ref": "indicator--a86bb5cb-d86c-457e-a1aa-ce10657fab13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f281480-b03d-45df-bddf-89b036c282b2", "sighting_of_ref": "indicator--c8fad0af-4bda-4dbb-bd46-3c6de4343897", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--387f2037-e66e-44c8-b1ab-cbeabc2aef36", "sighting_of_ref": "indicator--17ecfc5e-eb9a-409f-ab48-47cb0f9c10d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2795ded-117e-4b61-9e04-e19c56b40302", "sighting_of_ref": "indicator--403a8995-d0d7-4423-8e12-5d810bed3144", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158fdeac-b42e-46ae-bb8b-8865862d1fc4", "sighting_of_ref": "indicator--2673421f-86b2-4756-ac7a-3902f457f65f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d14658-8ef9-449b-bb76-f67b0bf0de88", "sighting_of_ref": "indicator--de528237-faa3-4e0f-940b-6d51e09f361b", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cd1463-32cf-43a0-a66f-2438297651df", "sighting_of_ref": "indicator--8970c0b6-7bb8-4c70-bb44-d43284df4f35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e690cdb-476b-4db7-b7d1-34b4a9174e40", "sighting_of_ref": "indicator--8617265f-3b9c-4dbb-884e-4ef5671a72f1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc38529d-f2f7-4928-96fc-ac356f22b29d", "sighting_of_ref": "indicator--e370ab7e-deac-4c54-96c9-1a1b7fa4515d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1708928e-e3db-43f7-9229-a0d87de92091", "sighting_of_ref": "indicator--030b0203-8986-4d09-98d5-6cf9f13af27a", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887be569-464e-4596-979f-55673b95a0b8", "sighting_of_ref": "indicator--5e2abb6b-7bd8-492b-b277-3eb1da61b97d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9bf07d-6289-47b4-8b39-b93658d0549c", "sighting_of_ref": "indicator--12f1e41a-5616-45a2-b686-83a5f7aaee5a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cc6d24-b739-49ec-b8c3-61b93437ef3f", "sighting_of_ref": "indicator--59e43980-8512-4c48-bb8d-8f7545365a63", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4780473-5878-439c-b94a-394bd4026cb0", "sighting_of_ref": "indicator--2696ad7e-a934-4e1c-a1ab-f803692afc25", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34599f03-3b82-4a04-b3e4-a0960b257d31", "sighting_of_ref": "indicator--732e9f64-b6ee-4f02-9d4a-0c90de339a1d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076cb58f-2247-4c02-9473-4ac0b888bb58", "sighting_of_ref": "indicator--09d55c36-9eb5-4b40-937b-f61aed938019", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324d3cf4-9ba9-444f-95f5-088b233c02bb", "sighting_of_ref": "indicator--d9d9e3f5-c761-49fe-bcf5-5f4cf9f14a9a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f33c137-1441-4e27-bea3-eb9d0dc5696a", "sighting_of_ref": "indicator--cd395464-8ef7-403a-b90b-37f050bc7e0d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c364f5e-aa6b-413e-8f81-89de21086056", "sighting_of_ref": "indicator--0469e638-7425-4460-b7c8-8719911c26e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9abe559-f567-4a1a-bc00-10bedd170f6c", "sighting_of_ref": "indicator--22ff5521-a2b8-45d9-bdc7-f48205fc8fcb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2163a27-cd49-417b-810a-4166cf8ff9fb", "sighting_of_ref": "indicator--061c2dbb-6e56-46b1-8a5c-c1ef8095b723", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8404947a-19a9-4b26-9eee-d68e13b62ef2", "sighting_of_ref": "indicator--8fc3bccf-26c1-483f-80ce-8524706ac011", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04d93dc-d8bd-45bc-b2d1-1bdd86bea2d6", "sighting_of_ref": "indicator--86df989d-1e4e-444a-aff9-d2345b2ce61e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90122618-732b-4004-b737-888c862301c8", "sighting_of_ref": "indicator--43a7688e-ef74-4394-ab4f-011b352a6271", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08877311-8fb2-4b3f-9e07-ed2643065ddb", "sighting_of_ref": "indicator--d099d3d0-04ba-43ab-b0cc-31433fa464c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de64032-6513-49fe-a298-32df7be4d1f4", "sighting_of_ref": "indicator--d1f63460-cf91-4238-abe9-3d369693072b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b79a0b-59c3-44ba-bb08-ad0d4c81aac1", "sighting_of_ref": "indicator--21a274c7-5c7f-4c25-b44f-b445669ed662", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69e1980-d4bc-45c6-9362-4311efbb8aa5", "sighting_of_ref": "indicator--7a840e38-4c4e-4c19-914a-0c811073af15", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84aca403-a253-4569-83fc-29e520353cf2", "sighting_of_ref": "indicator--14293d99-48ac-49e4-a8cd-945ac74fdc07", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f394a7a5-1194-4079-a745-cbefc1dbc986", "sighting_of_ref": "indicator--7102934f-c387-45ea-9763-4e60169998f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abfefa8f-65d5-4681-96c1-6004c3c75a94", "sighting_of_ref": "indicator--89664850-4349-4208-b9aa-ea9097822fc8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255fdcb6-1afb-4ded-83dd-1a8c4a4d6dd8", "sighting_of_ref": "indicator--8f5bcca6-0abd-4a8b-bc03-7f08353bbce1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507355a3-15df-4060-b11f-7520b896625a", "sighting_of_ref": "indicator--83edb7b7-c807-4afc-82fe-c79e460cd8cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb484c91-f52f-4cf8-90f9-5eafcc1f8750", "sighting_of_ref": "indicator--261a1665-4787-4bc7-879e-b9087c943d47", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f54e20-6518-4118-87be-855346ff07bf", "sighting_of_ref": "indicator--7cb1aef4-ebf1-42a1-a19f-64615f91a50a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd09fd68-82e8-4376-a7e3-a654a45f9bfd", "sighting_of_ref": "indicator--04af996c-7d92-4db5-9c0d-43d1a06d2d4f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90d9a2e-8594-4300-b560-e7cba79bbab0", "sighting_of_ref": "indicator--a8c4c5fd-cc1c-4112-8f47-293af635723f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6ba00a-de18-47e9-9017-13904e8d3564", "sighting_of_ref": "indicator--e4beaffc-6b9d-4bc7-bab2-728c43b4a94a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317fd64a-7b1a-4c57-ae0c-9f36c76cec93", "sighting_of_ref": "indicator--0e73fe26-78b3-40c7-8a2b-a85507da35d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc43da82-4570-4902-9356-9d0f3423157b", "sighting_of_ref": "indicator--0e2e4e02-ae30-49fc-bc19-d0eb96b0f5b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65286375-ada0-410f-8bc4-0d71eca73d6e", "sighting_of_ref": "indicator--a328de3d-f888-4093-a52d-abe4897b4ee9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac12327a-1f10-43db-a69d-d0d2aa0c66c3", "sighting_of_ref": "indicator--13e711be-e5cc-4c31-960e-a7f8483b94ed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c795a2-b08e-426a-9567-d5423d3d38e9", "sighting_of_ref": "indicator--8a8fc13c-cfc0-4b93-8d98-97018f191b55", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4959d55e-fd7c-4735-a1e7-d52c34b80e7e", "sighting_of_ref": "indicator--49f6f990-2d73-4498-ac9b-ecb7e7af8a1c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d0459e-d8c6-4f08-b953-90cf9600fe6a", "sighting_of_ref": "indicator--7592f840-f684-45aa-bbf9-daa85367a705", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edafd05-e1fb-439f-99fa-8c326a4500bb", "sighting_of_ref": "indicator--a7a3e3ec-36a2-4a67-bce9-e47cfeaac11a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe2f0bc-ad1a-4886-ad21-6603521dde20", "sighting_of_ref": "indicator--f293f5ee-b201-49ff-83b6-840a22aa015b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb26f1f-fa40-41d7-bd5c-8f8ff96498af", "sighting_of_ref": "indicator--7aec13f6-7b33-4afc-8e41-ff4974c83e1c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79bc37d0-9129-4c85-ad3a-9e461726ba99", "sighting_of_ref": "indicator--951ff5c3-7333-454f-b5b2-4954652605a7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb51399-6af6-4458-8b04-15ad7e813c1a", "sighting_of_ref": "indicator--06087c65-6cf4-4458-817c-8a4813eb40e2", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9b41b4-ef5f-4e46-a202-8afa68bcd91c", "sighting_of_ref": "indicator--a9837984-65e2-425c-9726-d10030344fbb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327e8426-44cc-4e0a-91e5-3c2038a3bcde", "sighting_of_ref": "indicator--b8b7e4b2-b700-413b-89f3-0a5390a1cd1a", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f29979-d6ba-46e1-884c-360d25d8af34", "sighting_of_ref": "indicator--b8b7e4b2-b700-413b-89f3-0a5390a1cd1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0801c7f6-a030-4d4c-a7fe-3dfb5132c9fe", "sighting_of_ref": "indicator--5afce699-b094-466d-8d14-134088e783da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0a527e-1560-49f9-b23f-3a8969142347", "sighting_of_ref": "indicator--f338f5d6-2cc4-4430-839a-4acda2ba9aa4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1e021b-ce09-47a1-8962-3427b0b50200", "sighting_of_ref": "indicator--b12aee1a-ed31-489c-bfd1-25962ca5cda0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c05a69a-c15f-4257-9c21-34d2116bc022", "sighting_of_ref": "indicator--26b409d4-ca0b-45e3-89a0-18d3f13b7074", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27a3bcd-d4a1-4d04-8398-85bf0c0be02e", "sighting_of_ref": "indicator--84ef2b36-c7e4-43f5-9020-ac0bd58bd22a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0667ef51-2925-4931-8bec-2be897f9ac9a", "sighting_of_ref": "indicator--0a062834-e53b-4639-b389-49b1f8574ee6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed1c2beb-416d-4f30-97f0-971f131467ef", "sighting_of_ref": "indicator--66bf29c0-0c56-4ac1-b558-e08190d8f5d1", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54edf234-9430-4ba5-91b5-1cccfdb885db", "sighting_of_ref": "indicator--3d88075a-970a-4d93-b7ee-73ffb8b90f15", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df19c412-4ee4-4755-b41d-e3bed4d2d5aa", "sighting_of_ref": "indicator--fb57af11-1757-4312-8791-4056a7a0a016", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f0b149-4f53-4286-bbb3-444d748d881d", "sighting_of_ref": "indicator--9addcade-48c4-42c1-8b9f-bf6fb22b38c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d151aec-e1b1-44c4-9fa9-5fe7b79a2c2b", "sighting_of_ref": "indicator--53217ee3-9283-44ed-93f7-cbee8358d986", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9897ada2-3d88-4301-8d0b-bc4c90491cae", "sighting_of_ref": "indicator--663f8d13-7aba-4707-a68a-4484b852b9d9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f0a908-80c5-4e24-abc9-90e1acab45ba", "sighting_of_ref": "indicator--e917817a-a8c2-485a-8b9c-4a227e93099c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33cb3d6-3f9f-4a3e-ab23-8d35b43b68c8", "sighting_of_ref": "indicator--65270379-a497-4c0b-a65b-8b0a95030a2b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a126658-adf9-4f2d-a66f-16391ad136f7", "sighting_of_ref": "indicator--8d66ab72-040a-4b03-9457-291e95ed12b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3948241-47e3-4f23-8b86-54cf01306618", "sighting_of_ref": "indicator--4492d469-cb20-42ee-8167-6dcc040f04c9", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b309379-b113-48db-8fe7-16be46eb349d", "sighting_of_ref": "indicator--692ab4d7-ab22-45f1-9f9d-60cda6541f0e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4382beb6-1321-47ae-85ee-cd87c7dc8195", "sighting_of_ref": "indicator--209aeb4f-f4b9-4b08-b451-e52cc7f1eb58", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21102e83-350e-49a2-bf18-e9319e881575", "sighting_of_ref": "indicator--2838f0e2-b2ab-47ea-88b6-805f901e322b", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0feb545-7469-404f-86d2-03335ac39d91", "sighting_of_ref": "indicator--b6b0aac7-97fb-409e-a39d-7108cd546752", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8dca71-8c5b-4f44-98d1-abaf44f193d3", "sighting_of_ref": "indicator--a3e65f7f-cc69-4434-b3bf-b6d600ac31fa", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61dc4468-216a-49da-b7fa-e6efd3c5256d", "sighting_of_ref": "indicator--65305b06-f96e-46d9-8c24-341fe618fe32", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4249bb0c-e63c-4489-bf05-4cb8ec498420", "sighting_of_ref": "indicator--fb07286e-a158-4366-bfdb-f72d88f8eb7c", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f3f14b-94c5-41f3-81c0-412efbf15ef8", "sighting_of_ref": "indicator--2e44ddb5-f5c4-421a-a85f-7374f89a05da", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641f508a-00ec-4ff4-bf01-8a260c2b8977", "sighting_of_ref": "indicator--b95c261d-5be7-46ee-ac8d-75b7bbcd71de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbfb735f-7252-4d02-bc0b-aeb6c94192a5", "sighting_of_ref": "indicator--38534520-289d-448b-8bc8-4ebf6d51ec93", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a042e79-307a-41d9-9f71-1d94d45aa925", "sighting_of_ref": "indicator--26ca92a7-2805-42d6-aa1a-a24484a939ee", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41b6575-1d47-47c4-a52a-a42b5526dd16", "sighting_of_ref": "indicator--50a9924c-9f0e-4005-9dcc-f451834c9019", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1f4a87-e7b8-4a44-b402-f330d21299e2", "sighting_of_ref": "indicator--4c01be94-523a-45a8-b860-83453b57366b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03ec5cb-39ee-402d-b73a-38f5623b47f9", "sighting_of_ref": "indicator--3ef62c52-668d-4f99-b93e-a1a74b4330a5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5709dac9-a2b6-4744-ae9b-92ce87a3c6f7", "sighting_of_ref": "indicator--932cc682-1960-4d6d-835f-9b18cac7a52e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364068a4-0e65-43e7-b89f-d403b8fd1d1e", "sighting_of_ref": "indicator--6c8938cc-8be2-4e1f-a953-52d7c6edf10d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8477e79-9ba1-4ec2-a23f-82701a8b8047", "sighting_of_ref": "indicator--92884d35-d079-4ca4-9908-40fe971f8cc5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac60d8b-ab19-4fbc-9bce-ca91685aee57", "sighting_of_ref": "indicator--e2412c85-4452-4afc-8940-409923f3a3df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab97dc0-f776-4e3b-9028-2a37bbbae090", "sighting_of_ref": "indicator--3085686d-e3a4-4126-8a3a-73de5ca7bd93", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b572910d-8a2e-44ca-9eec-83dce3029e7b", "sighting_of_ref": "indicator--49ffe833-d310-4ed9-b1fc-a699e8b2a44b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da65fedf-f52e-4c24-b03f-316c851b2df1", "sighting_of_ref": "indicator--63ad7348-1f45-4502-b418-a6ad868234c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa73151-a4d5-4f9f-8ad0-cab7ed153348", "sighting_of_ref": "indicator--b7af25aa-3411-4d95-86f1-d076a33d0548", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ad02c7-6065-4d37-a984-75a0715a62d5", "sighting_of_ref": "indicator--611cc267-70a4-4aa3-b950-497fa62cce17", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--714743b8-4c34-4f12-a31d-beaa30902821", "sighting_of_ref": "indicator--e0691651-36b4-4be9-8203-2aa152c4ee28", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92779ca2-8b2a-40e7-b51f-e15868b92e39", "sighting_of_ref": "indicator--402dd8f8-c1dd-4f69-b5e9-004488b3fc39", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11529a7-8c40-4e93-8923-6d325245e6bd", "sighting_of_ref": "indicator--0170d0c1-e3bc-47ee-b57a-72638cb4e342", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8560a47f-f62e-4c46-b1c0-649a1ba0bf59", "sighting_of_ref": "indicator--69d4782a-a200-49a0-a807-cc991db7f6c0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdc508c-ee32-4a6b-b350-9334311c7d97", "sighting_of_ref": "indicator--dba3e2d8-978e-448d-97f9-762ed2b732d0", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdd443e-0c84-4aa6-8a22-884fe0150805", "sighting_of_ref": "indicator--dba3e2d8-978e-448d-97f9-762ed2b732d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e449b459-01d6-43f0-90f4-a682b03fc503", "sighting_of_ref": "indicator--88078731-59bf-45a1-ac6d-14bd7a26d422", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2527c8-8960-49ec-95c3-3e004940bf58", "sighting_of_ref": "indicator--dd65924d-df1b-4a8a-9e46-8b9a325e081c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e06a43-15ee-4d04-a994-06e9cc18d984", "sighting_of_ref": "indicator--d866b93b-9036-4da5-9cfd-03775f0eb50b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2718c01-3493-4707-b368-f3c015ad2c45", "sighting_of_ref": "indicator--5da3ab1c-36fb-4263-a9c2-df514999bb1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d34414d-8b68-4b8f-a3a9-cad0bcaf84e4", "sighting_of_ref": "indicator--bee8cc14-44ca-48f8-bfdf-efac1c6b0e48", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3688e3-91d9-48cf-b866-4df43f108b7e", "sighting_of_ref": "indicator--d94daa91-7e27-427e-b110-55608ec5b198", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61548d1-4700-4b85-9c6e-0828d3db1ce5", "sighting_of_ref": "indicator--4cd990a1-c3b1-43e8-8162-4db1bc2a8423", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c531e461-bcef-4dcc-96b5-463444d1f8d1", "sighting_of_ref": "indicator--31d401cb-9fa3-4c3f-b49e-450bd578bfb7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d510e60-4fe5-4b69-8d77-95f2abb9a895", "sighting_of_ref": "indicator--fa458478-cd46-41d5-b0e5-84e1a7b6a896", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2075a8-627d-480f-8078-aa9d97235fbb", "sighting_of_ref": "indicator--14f5bbba-fb7a-4b2a-8ea2-9859e03fbe2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a41d00-8288-4067-977f-b11cca546933", "sighting_of_ref": "indicator--9486107e-3e0f-4007-8dff-1f91a4c2d119", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d088a9e-e9e8-4d2c-8a22-aa9d796609b3", "sighting_of_ref": "indicator--6246f8b5-4a4b-4e2b-9b5b-29844bc49bfb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871a4a3d-ea66-48d3-8623-3e009b74535c", "sighting_of_ref": "indicator--728df79c-f33a-4466-b621-bd954757a4f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fbe9ab-2faa-477a-a00e-a05480f28f85", "sighting_of_ref": "indicator--d6255147-377d-4413-8ef5-209776d3f27a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccb8ebf-6e3c-4e3f-a6b6-cd73e145d83c", "sighting_of_ref": "indicator--ecefb954-1920-4d1e-8d6c-21177c5bd863", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c3af1d-a686-472c-a6fe-f5f03b7cbcb2", "sighting_of_ref": "indicator--2f3df0bd-deda-402a-9935-98b569586157", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e0af69-7174-493c-ac17-0261e5c15df4", "sighting_of_ref": "indicator--d280e57e-9248-49bf-b78d-6bb3ba7a3a61", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c19b014-33e2-4c29-a067-b0cc5f75eb17", "sighting_of_ref": "indicator--7c3046e9-9e29-49ce-8d4b-ef14ffe2bc98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983c24b4-c313-426b-b702-6d5e66ecc1d4", "sighting_of_ref": "indicator--27c3c57e-df88-4970-9fe9-4148a9daa352", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7edcd6-932e-495b-aa1f-7d175bfc5f79", "sighting_of_ref": "indicator--17ba6ef5-ee77-4a33-8cd2-83ce5b2cb623", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ed2ce4-29ae-4f44-8263-cc973e481017", "sighting_of_ref": "indicator--d7cf1371-b15c-4118-8df4-b2c910e0c329", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47eaef3-2c57-4ee5-bf7d-8712fa363a9f", "sighting_of_ref": "indicator--81eae21c-c38c-4290-9bca-68702b0d2b24", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e73a411-ead9-480f-b68d-fb482e16d7b1", "sighting_of_ref": "indicator--597b5901-b8b9-4d47-b47e-f028f3ce478c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf50b0d-e417-4ca5-b765-414c969c6f5f", "sighting_of_ref": "indicator--90226771-a053-4452-8721-3aa30cb5dc30", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff2e096-55ef-477e-9293-eaa6d8516b6f", "sighting_of_ref": "indicator--cba3f186-8097-41a3-abe0-6af9351dfb68", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c69080-314e-4dfb-86f8-95c6d789b434", "sighting_of_ref": "indicator--96799d60-cf44-404b-9017-fafbb8a57911", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1d78d0-3595-4666-bcb6-671cbe031b8c", "sighting_of_ref": "indicator--bb4333eb-9606-4238-8c86-ad41e119137e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d62a157-38b6-4256-aadc-6c33debfcad4", "sighting_of_ref": "indicator--aa400d7c-7356-4b18-b9eb-25a189781cdc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae21e039-91ba-4451-9cad-23dae300251d", "sighting_of_ref": "indicator--933a005a-1ea2-407a-a037-a4ef64144420", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f03d15f-9a57-4238-8c30-7ca3514129aa", "sighting_of_ref": "indicator--4b3771c8-5858-4c01-bcd2-820c30558ab4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e73e310-4d97-4614-883a-7bfa2618a3b1", "sighting_of_ref": "indicator--6cb3ab53-9d8e-4340-a7c8-7ab16c0f59f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d453c9-0a2e-4a7a-8e5c-2ceb2313e562", "sighting_of_ref": "indicator--8acfda9a-c81e-4b29-b91c-108da10b87bb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef005d5-67a3-486d-8f6c-b79c2eb36c79", "sighting_of_ref": "indicator--b0d2b085-6be1-415b-b6f9-47019c319ec9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c45b7a-14fe-4b19-9d0d-8d40b4b533fe", "sighting_of_ref": "indicator--531f548c-874a-4c6a-b4f8-0b1bc20e565a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6aa9539-2c33-4160-a061-535ecdc8c074", "sighting_of_ref": "indicator--5f190087-de6f-4545-a0d7-1558f8bbf32f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88601bd-24fa-484e-8c96-cef983830735", "sighting_of_ref": "indicator--981a4283-b38a-469c-9c17-9daaa4a5e4d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7716b378-e00c-4cef-a502-52e2bd1a5e26", "sighting_of_ref": "indicator--25fdd349-0f0c-4224-8351-ea1f7fbe39b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc741208-e606-4773-b104-2d29e1786b52", "sighting_of_ref": "indicator--64c409da-bb4d-4914-8b76-7c4434f95ed1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4af9e04-6f79-46af-a5ad-5f32be256a48", "sighting_of_ref": "indicator--ab51f185-b03d-490a-a8ea-f12d56ac2726", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bea0844-4597-45f9-a6b9-fd9f164aa084", "sighting_of_ref": "indicator--9e7896b6-92ce-4a69-bbc9-122c7f25edd3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dda07e0-4817-4194-adba-7c248ffe5431", "sighting_of_ref": "indicator--8a85a0ea-4e5b-4ae1-b526-bc68afa37afe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691937d3-bf83-4015-885c-66e8b66fa5ee", "sighting_of_ref": "indicator--bbf4021e-c48b-430a-8b60-fff7cdb01f0a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864f01a4-fd49-4be7-8e39-3a686e48d3f2", "sighting_of_ref": "indicator--8648f31a-501d-418c-ae7d-2dcee24cb407", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87419f97-5ee4-4c44-89a2-8415b7b80cf3", "sighting_of_ref": "indicator--b57150f9-ef8c-4a70-b399-da4579a8ac5d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bc518c-f041-4705-b55b-7f0f4fad53ad", "sighting_of_ref": "indicator--caed0011-05f8-454b-9051-9aa03729bc78", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191f3894-ef45-4784-92ad-d136dfd4ebbf", "sighting_of_ref": "indicator--ec1bab66-5221-4b5a-a361-540ce1530675", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d430769b-d269-4209-a862-f5725b29d118", "sighting_of_ref": "indicator--6d177914-980b-4963-9a8b-6e758782e363", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf687cb0-f68e-48e4-a073-4b207f8c7c7f", "sighting_of_ref": "indicator--27c8514f-4f97-4e95-be24-8a12db810fb4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceaa3139-9f08-4706-bdc8-a5b2733978ee", "sighting_of_ref": "indicator--1034174b-c42d-496e-96c7-50d014610510", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46a1f71-1a04-4827-9e6d-6fe1c86e115d", "sighting_of_ref": "indicator--69f47606-eff8-41c0-a429-0e0a5bab0b0e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05eab047-a230-41c4-89ea-6eeaceefa02c", "sighting_of_ref": "indicator--6c936702-a10a-46f3-999c-79af7724f749", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ddcc5c1-1d02-48ef-ac09-6ca17e9227a8", "sighting_of_ref": "indicator--784a7637-c09f-4676-8873-6dc0d24dd9f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e4f73b-8233-4e44-b187-7615b26d5766", "sighting_of_ref": "indicator--b4d3fc01-8ec4-4adc-83ed-9fba1126a8df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df6aa9a-a11c-4d62-96f3-ebe6be995add", "sighting_of_ref": "indicator--abc4effb-40de-48e2-9890-c9c5f0aa764c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c108c9c-cdc8-4813-a3cb-01baaa1f84d2", "sighting_of_ref": "indicator--973c9441-30a7-464a-8488-29dc85d6ec8d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7c4f7f-4104-43ba-8160-5eb57f98d4ce", "sighting_of_ref": "indicator--8e057e33-aa7f-4a63-ba69-fa57407f9caa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fca7c1-bacc-4932-9746-f0d9fea23041", "sighting_of_ref": "indicator--cd399154-8e43-4928-8d2d-6216d03db4a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf78cbf-0a4c-4745-a40f-4a5c66a47595", "sighting_of_ref": "indicator--15690914-7a1e-46fd-b05b-6e5dd37c45bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98ee19c-49ae-47da-b552-afa7aa4cd5bd", "sighting_of_ref": "indicator--3db77e1a-d37e-4143-8da1-77d6f1767984", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50228828-c1a2-48b0-a44d-152bdb6dae05", "sighting_of_ref": "indicator--d6978b16-9b2a-4d4d-9e85-2de38f0e2eca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8720a9-5ba6-46e2-835e-cc168ec6567b", "sighting_of_ref": "indicator--229d1fd0-ba36-4f9c-a3c4-8f29cb4930c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bf109d-e97e-4b2c-b656-0d658167fbd6", "sighting_of_ref": "indicator--66823057-b8e0-4442-9b9d-ee87e44b5f76", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--183b3241-5957-4311-9616-56ee66985369", "sighting_of_ref": "indicator--42e7c48e-e372-449a-9f5d-44893773c81f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f58e3f-779b-437e-9584-e39dbb45d268", "sighting_of_ref": "indicator--0f915c93-4732-4be0-8ecd-8ee8ce623bdf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10fb513-23c5-43b0-8b5a-3eed694fa4bd", "sighting_of_ref": "indicator--cbe62eb6-1235-4f4c-aac2-993aa14c54f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c71b8a-5386-4d8c-9a34-134455001f75", "sighting_of_ref": "indicator--9a8e8704-85ac-4c42-a760-6b53e35d744c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a555a062-f4cc-4b6a-aca0-c93b2f3e7baa", "sighting_of_ref": "indicator--e03de602-ebdf-4f6b-8810-bcfde348ee1b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf9d4e8-90a5-4a18-b19c-822c5889aea8", "sighting_of_ref": "indicator--f58c756a-719d-42c5-b897-6189135acc07", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3e9d37-1b11-4e64-8122-5ac86b90a723", "sighting_of_ref": "indicator--340b17e3-6c78-4b58-9397-59bc6f0193ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ab4f39-5a37-4df8-874c-4137618551d9", "sighting_of_ref": "indicator--51bbab6a-0d9f-4d0f-bbcb-1eeeeeb45afa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14b1ea8-5394-413e-b604-e889f9b41bb4", "sighting_of_ref": "indicator--0a6e3eb8-656e-4b0c-8731-cd214b9987fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6003e0-78bf-40f4-8ecc-3dcd6d47f627", "sighting_of_ref": "indicator--3f260c7c-62d7-44c0-86da-01c31e6c6d53", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe56c59-e54d-4604-93fa-40ad658c4622", "sighting_of_ref": "indicator--7a9b156d-6609-4253-a035-6d7715e166dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7605bcaf-c5f7-4cfb-b6f3-7f88d3c33953", "sighting_of_ref": "indicator--60988009-241a-4e2d-ac0d-4d6473d455c0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d97366a6-2667-4072-ac2f-e26f8cb22bfc", "sighting_of_ref": "indicator--46f40955-78e3-43fd-9461-c9371c872967", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aba7f4b-fe1b-472a-b966-c564b89484c0", "sighting_of_ref": "indicator--8d6fb6b2-e252-4b8e-97ed-d06eed3a5942", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601a8102-f59b-499b-b4e9-338a09f07dbd", "sighting_of_ref": "indicator--1786d156-d3b5-4726-9bd3-cb7514f4ed61", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e86c661-7251-490c-8f3a-bdfa9ab98f99", "sighting_of_ref": "indicator--9f4d4abe-a0b4-4956-97b3-c7fa2dda0979", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d3cd71-419d-4b3a-aa57-7f87b0da9663", "sighting_of_ref": "indicator--b3ba2c53-791b-4a0c-a129-a11cf0350a47", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0951b13-ad7d-4e80-97e6-d1e8d4e762e1", "sighting_of_ref": "indicator--17a5f98f-a61b-4d24-8ff7-6f3e19e809c6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d99320c-18bb-4c1d-a053-b6a0e1bf88f9", "sighting_of_ref": "indicator--741108e7-9803-4880-a243-388fa914fc86", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c10b68b-233d-4ffe-909c-0e9f5ba537b2", "sighting_of_ref": "indicator--48628f97-cffa-4d5e-92b4-08281824b671", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cb7d78-99ad-4798-9806-7e866dade78e", "sighting_of_ref": "indicator--cd5224e2-530b-441a-bebf-d7e83e54dcde", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ec2992-85c4-4b41-a201-885bb9c531c7", "sighting_of_ref": "indicator--0619ddc2-d7ed-46b7-b6fc-8a049557754b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57b0f1f-65ab-4e9a-8dbc-8c5efc8c1243", "sighting_of_ref": "indicator--31a12b65-9e14-49b9-957c-030ea9a3936e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26cef32-e281-419f-b3af-d4875b1b5fff", "sighting_of_ref": "indicator--bb3853b4-87f2-4b43-9957-dd09302df30b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d252e24-4eb5-4713-adff-498c6e67a654", "sighting_of_ref": "indicator--f74800e7-245f-40fc-acaf-264803c6eaf0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63468a7e-5234-49cd-b769-9cd573159bcd", "sighting_of_ref": "indicator--350c2487-ee54-4f1a-bc8b-2a6e495fa030", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28810878-8bfe-4108-8124-ab8cae2f8544", "sighting_of_ref": "indicator--6a817d73-9e5c-4a52-b237-89f45db7717b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb182b5-88bc-4cbf-8205-8424f6898e98", "sighting_of_ref": "indicator--6bf1f928-65dd-43c0-9a7f-c8a8570f0454", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f71c40a-5b3c-40f9-99c5-0133bada569b", "sighting_of_ref": "indicator--00e1479b-c39c-4a74-abd8-01324c2ec271", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d10f6a0-8460-434f-8416-fa273446290e", "sighting_of_ref": "indicator--f647e33a-7185-4ce4-924b-43bc369459a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab00b1f-dc60-4d99-a8d9-71a2480c4479", "sighting_of_ref": "indicator--f6e72775-795a-4b33-9d42-0bc891a6696f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81fe8dd-59c3-44fe-80e9-5291bbcab709", "sighting_of_ref": "indicator--241c22b6-0697-4d4b-8a13-b2d741241971", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6207f2e7-fb39-4ad4-a335-159890c500c2", "sighting_of_ref": "indicator--d542b3b6-f16c-4a1e-a91b-777896f3cae0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1bae29-1a9e-435c-b02b-504b2add7cc3", "sighting_of_ref": "indicator--d82147f8-161e-496f-b944-62846a481afd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6794d031-47b6-46fa-b9bc-f2c32741eafb", "sighting_of_ref": "indicator--3f837239-a4f9-4562-bb1d-44cf771543be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35652456-f6ee-46c1-8c5d-a45e65bbb945", "sighting_of_ref": "indicator--67033c65-16ca-48ab-b87e-eb9620e4ecae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55ab20e-7aed-4f29-9cf5-1a291685f0cc", "sighting_of_ref": "indicator--c53e517e-e9dd-4c6e-ba9c-5314b5a21e79", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928bdf91-a5ea-4998-8bbb-2b275c9e491d", "sighting_of_ref": "indicator--fc21ad4f-239a-4ecd-92eb-670eed0d7dab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a848900-a351-45d2-b74d-517b7c8edaa1", "sighting_of_ref": "indicator--40b01d44-935b-4168-ac48-8b6872023a68", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a528dd4c-af12-4aa7-982e-1b9659744046", "sighting_of_ref": "indicator--bd9a1110-554a-456f-ae8f-3ec324a4a0f9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335fcc6c-d261-4be6-a258-a7c5ebd47b71", "sighting_of_ref": "indicator--4e9a30b0-3e82-4b9d-8f74-c5449bab0fba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80adfe53-db6f-4a95-96cc-39154aaad47e", "sighting_of_ref": "indicator--6d78abc5-06e0-4d46-bc07-d79dc83f275a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a87a801-a27b-4595-b62d-d2b76e82de14", "sighting_of_ref": "indicator--d07d6cb4-b05c-486f-b7c2-dbf77c8e14ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b13a8c-7fa0-4605-83cd-9d9cd50841b2", "sighting_of_ref": "indicator--da76bc82-776a-4a79-8377-8880f029cfa7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd468873-2eb9-4551-b71b-f1b6626664e3", "sighting_of_ref": "indicator--c376001c-47f6-4067-9e8f-0e683b54cc9a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfe2db4-f62d-4632-bf0b-aaaacec81c4d", "sighting_of_ref": "indicator--e454dfa6-43db-46cd-ba83-f5f51ca7393e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3df335-2834-4cff-ab1d-025cb7550c05", "sighting_of_ref": "indicator--2cfcba99-f2c8-4d07-997c-7c8d3bd5457c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca32cb3-914c-4f1b-976a-f0e500638a95", "sighting_of_ref": "indicator--026a5f42-0741-449b-8534-fabf007f4324", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bba7646-5a85-4a0a-a435-eaddbbe38254", "sighting_of_ref": "indicator--3d5f00bd-bc92-4bb8-8bb7-e4c714d426f4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f652f61-72e4-4672-ae27-010dbefac199", "sighting_of_ref": "indicator--d5d88063-0b78-4055-8986-6058931a5d42", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab078dfe-0213-4f43-ab27-b9298dc3878d", "sighting_of_ref": "indicator--c185f013-476d-477b-bd32-08204aea40f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6dc4a2-d263-4065-b7d7-300827cecf2c", "sighting_of_ref": "indicator--08ab8c56-da10-49d7-a970-fcae260f884f", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f2f6e91-cbd2-4e77-9d84-b3eaf9e2bf02", "sighting_of_ref": "indicator--6c0d2f8d-153c-4a1b-af17-f7663d599bb9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4823a0-0257-4577-8b5a-68f389cacb50", "sighting_of_ref": "indicator--938323d5-1e15-4f6f-b03d-8468b7fa59c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbc9dc7-1f56-4e25-ad0e-b62118428e28", "sighting_of_ref": "indicator--10ecfcfd-e9f5-48b2-afac-12870c742d0d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db9d634-4fe3-4c0b-b0ba-277dea0d51ca", "sighting_of_ref": "indicator--bbc94a40-8cc8-4868-81af-f73662697238", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423630fb-7819-4aaa-8620-990cb7551fce", "sighting_of_ref": "indicator--6f06dd2e-1f84-4db1-9a4e-11608e53abb1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c799a2a-7a08-469f-86b2-f9bc0f69b9c3", "sighting_of_ref": "indicator--41110114-3164-4840-9935-efd1dc62b826", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103356e9-8857-451e-9cc8-ae7d070cb10c", "sighting_of_ref": "indicator--0b49ccb2-ba15-491f-bbe6-cf9c59b2aff3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add95c1b-aee4-45ab-906b-af3576d30d4c", "sighting_of_ref": "indicator--88d866d7-af1b-4ae5-939e-2485c4f7d4b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b3b78d-a4a1-483a-a665-601da7f4891d", "sighting_of_ref": "indicator--26951da6-c2b2-4c85-b9cd-63bf6d3e6ec9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2c2fb06-bed2-42d4-b4d9-6c880af94477", "sighting_of_ref": "indicator--d80e4fd5-3a40-4543-9e03-9963506321ee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604433e0-ef9d-4d80-a9b2-cc7ac06ce3a9", "sighting_of_ref": "indicator--a4937e9c-6874-4ad2-ac0e-578ae6d95068", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c664f1-efbe-4fdf-9ec2-adadc7ca0c42", "sighting_of_ref": "indicator--41093a0f-dd34-4c66-8980-72f989f61ff8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4132b6de-551c-4956-a3b9-3c9e77673c59", "sighting_of_ref": "indicator--dd495d89-983a-4f68-b769-38f0b2a59fb1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed7fd6c-d4bd-457d-898c-e3c4df2e6b4d", "sighting_of_ref": "indicator--9f5c18f1-1a44-4910-a5c3-22e5bc476cd6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bffbb7-fbdf-4b45-bab8-ac218574a7f9", "sighting_of_ref": "indicator--6675b230-bfa3-454d-9648-90cc0c305e89", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97bb0ba-3ff1-45e7-b4e9-1644295d28df", "sighting_of_ref": "indicator--448d65b0-755c-4f21-b617-fcd35c2a0ff1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29165874-ab4d-49ec-9830-d97f7625bed7", "sighting_of_ref": "indicator--448d65b0-755c-4f21-b617-fcd35c2a0ff1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ec40621-17c1-42a5-b45d-a0c4e1358d26", "sighting_of_ref": "indicator--f0d1323b-c164-41e2-8065-12612bcea02e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034412e5-f53e-4adf-9899-9a97f714f10d", "sighting_of_ref": "indicator--a2a7500a-68dc-494e-a75e-230d6f518f89", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97b0da2-8cbb-4d1e-a9af-300b28761812", "sighting_of_ref": "indicator--c72564b6-20f6-4a10-ace0-f8b4b3c0ed33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676fadb1-cfc5-4c95-a4ce-385165b0e8ae", "sighting_of_ref": "indicator--103dd06f-3b79-4e33-98c7-447bddeeab0a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972b92d1-7338-4ee5-b08d-d68497136822", "sighting_of_ref": "indicator--2df87199-954a-4d22-b05a-fda08500eaed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f778c4-ed08-46ec-8f24-b61c44e2910a", "sighting_of_ref": "indicator--1fa571e3-64a2-4339-921e-05902121312c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b43ab9-f2f8-45f5-964c-6425df5a8772", "sighting_of_ref": "indicator--4f87d9ed-c585-4366-abee-bb9b56777149", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09adc462-1ee1-4122-afb1-4ab128f2fea8", "sighting_of_ref": "indicator--01ec42cc-4863-4b0c-926e-8eb855a7e37b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81054cd5-1898-4f95-ad40-12ac044c9624", "sighting_of_ref": "indicator--c5ee091c-4aa0-4c74-a2e6-31802f213a7f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8279bb89-8f63-40f9-baba-0bb497e872cd", "sighting_of_ref": "indicator--bad3eb5e-5a1e-478a-822d-68ad1ce269ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becd54d0-1ad3-4719-9187-601a3f8c951c", "sighting_of_ref": "indicator--3b6c12e3-811f-4d13-ae74-8015fc4e9cad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15e7193-2c67-4625-a909-4bdcb7e04225", "sighting_of_ref": "indicator--103ec762-93e7-4d40-b1c1-330012679ba0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18cbc32-979d-4637-88e7-9696eceea682", "sighting_of_ref": "indicator--9dec7a04-970b-4e66-95af-e496821803df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f5353b-12c4-48ce-ac29-ec0ae1f45ffc", "sighting_of_ref": "indicator--6eb79b40-770d-43af-8402-04b03e1ab36f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c432751-3bbe-4899-9426-5397d7da3744", "sighting_of_ref": "indicator--b56dd60d-3b28-43e0-893a-e3ffda015cdb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5e63c5-69ec-4aa4-b241-d3dcdbaa45f1", "sighting_of_ref": "indicator--90810f42-a0a4-401f-ad14-bc38324f73a4", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61183db2-64f6-4375-833b-d4607ba14a43", "sighting_of_ref": "indicator--cbdd01e5-31b8-49d1-af4d-f7a2b2404ab5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac127f83-4f69-450f-a291-36fecdc83681", "sighting_of_ref": "indicator--88bc2afb-2b57-444c-8df6-5eb384905886", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddea615b-a653-414e-a82c-d7c49d0980d6", "sighting_of_ref": "indicator--221efa90-d07c-4744-983e-5492bf996332", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc990ccf-bbe0-42dc-848c-253acdb30c68", "sighting_of_ref": "indicator--8a7b5cb9-d9df-4968-9b2e-114f992882c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6520036c-773f-4ccd-b74d-68f91a7ea4ad", "sighting_of_ref": "indicator--861c4a23-e184-454e-9258-11a8eedcc48e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1a7368-9868-410e-9f13-f80ac6397ac2", "sighting_of_ref": "indicator--926f824d-f1df-47e0-b4e5-024251c21d33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50448d70-53b7-43a1-93ff-151c7ef21c9f", "sighting_of_ref": "indicator--0dee5ca8-a3db-4909-a3a9-c2f508f4fab3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c08dea1-6468-47ad-b49d-9478a9d77bb5", "sighting_of_ref": "indicator--f8fd8409-4245-434c-89b7-1641ca12f088", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749a6e0e-b173-41aa-9dfd-5e64dda60386", "sighting_of_ref": "indicator--4512bc51-0375-4a6f-9b78-b6f4e607e9ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b7041e-6123-4f9e-ac2e-b3dd0ebee9dd", "sighting_of_ref": "indicator--9acc73f8-497f-4ec5-886f-8e51ae51d7bc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11614bff-2987-4020-9058-488528433868", "sighting_of_ref": "indicator--a973bc73-9522-4bc5-8c7e-97827ee25137", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078621ba-8e5f-479f-b9cb-28ccd2f91b8d", "sighting_of_ref": "indicator--11a58fd6-d195-40f4-9863-36d98df3ee33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056913c7-b60a-4fe5-8e8e-6a1e070effdf", "sighting_of_ref": "indicator--2d39513b-a03b-45f2-80ce-d42de3b6575b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0a04ce-beae-43fa-8d9b-85428f100df8", "sighting_of_ref": "indicator--c5aed9ca-1e4c-4d55-a8ec-44a4027a43ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8949f1ad-7ddd-4f84-880b-d43431f748d5", "sighting_of_ref": "indicator--7b86415c-03ab-4780-b2ec-22da514e7739", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7323e22-1bec-4900-b8d3-0a336e91e902", "sighting_of_ref": "indicator--eb929aa0-31cd-4dc1-b640-dddb5d6d22fe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250c44c5-8920-4a6c-9493-d4de53b162cd", "sighting_of_ref": "indicator--9de28d10-f36e-462c-88eb-e04145abf50e", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e814773f-c834-41fd-92a9-4b6e4e5d2be8", "sighting_of_ref": "indicator--cc33711d-cb90-42f7-9176-169eddabe272", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734f1f98-47ac-4583-a7e1-9dca587f766b", "sighting_of_ref": "indicator--a9032acd-5a1b-4a50-9394-1f514bb822af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54726dd-2777-4f0c-8269-a5fd6da7a397", "sighting_of_ref": "indicator--db88ea20-a80a-4c01-b7c2-b0915a33e4ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2993c1b5-1194-4496-a80b-de230872d35d", "sighting_of_ref": "indicator--0c40bd59-d22a-4687-af26-2385de9b9c33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bd6eb9-6e38-4993-8556-b81691168120", "sighting_of_ref": "indicator--ed1803fb-4265-42ca-9a8f-efa680f9c2da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a470748-0eb3-450b-b1da-dffa01a756a4", "sighting_of_ref": "indicator--5a22b160-e323-4e92-9125-9b28766f4f7d", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847fb50e-9dc8-4db7-b6e8-7d17a76312c5", "sighting_of_ref": "indicator--ce0313cb-4c97-4af0-a64c-cdd22ba15096", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a09166-51ca-4a90-98d5-49cdd534aadb", "sighting_of_ref": "indicator--0498a99d-53d3-4d32-ad8b-cc1e18a65c35", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bdfcd4-c8c6-4261-a82e-8e921eec923e", "sighting_of_ref": "indicator--17f4acfa-5eef-4632-a054-5982af6ffd51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6623650-0971-4bb6-abac-e86d3e5ffdc8", "sighting_of_ref": "indicator--5083b2ff-3618-48ce-81e5-fea03ca831e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e6718d-fcc2-45ca-a9f9-72c17ee9232c", "sighting_of_ref": "indicator--134d8395-321a-4cfc-bf1a-3649f5717c1e", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61faeee5-3bc0-4322-9916-f4b8c0b11685", "sighting_of_ref": "indicator--afba23f5-6a5f-487b-be5d-32546e1ba495", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4981c5d0-84c0-4e0b-8130-4f818407f40c", "sighting_of_ref": "indicator--147edf6e-36f1-4915-a25e-4d88d2854d6c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16aa150-32de-4411-af46-7704cac29631", "sighting_of_ref": "indicator--614fab56-444c-42a3-82bf-46b0596fa430", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38eb0875-9e6e-433a-a8c4-5341f6e27357", "sighting_of_ref": "indicator--862d6683-b1d0-479e-b0de-bc723a49cfc0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ee9418-ead1-4234-86c4-359873c25334", "sighting_of_ref": "indicator--cc942e8a-cac5-4f3d-9765-560bdeaf6c5b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431848b7-7c21-4420-9b15-e748a3d271a5", "sighting_of_ref": "indicator--7bf65fa4-df30-4093-a35d-8a32aac5d0a7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36896d31-82dd-4ab7-8a7f-fadb88cb65be", "sighting_of_ref": "indicator--73cbcbfb-3034-4d9e-8586-d0b4f00875ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adf8f97-8bfe-4e66-9c3d-e860717bc05a", "sighting_of_ref": "indicator--4cae1f1b-0251-4ed2-aebe-94ca5aadcd3c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e8891e-7553-49eb-919c-6af7d6602399", "sighting_of_ref": "indicator--cc373b47-735d-4033-8584-c0e5bf849970", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bd04b0-e7ae-4487-8655-5ebb41b8ee63", "sighting_of_ref": "indicator--1d0c6999-47e1-4bf2-8832-7cecf4fff5d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab81b48b-e1ed-4d52-84b3-b1fb4a046a45", "sighting_of_ref": "indicator--8ac7a858-d7e0-46fe-85c4-8f51227e4c73", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f28e465-340a-4c9a-aac3-7d561e862d0f", "sighting_of_ref": "indicator--1313863f-16e9-413b-a0ba-333a23b68e83", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc20655a-3c47-4579-8969-2da476d35b0f", "sighting_of_ref": "indicator--c97fde81-9ae1-4f9f-a5b6-111ceb13c42b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e73842-8900-4e72-8dc8-515c561491a9", "sighting_of_ref": "indicator--3ca97a94-7794-42b2-9b47-8d54137f6446", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de551082-c5de-4e92-90da-21f153d14d42", "sighting_of_ref": "indicator--5da752e2-588d-4100-a5ae-655c05b4ec5b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a36804e-a21e-4b83-b1a7-43c95e2bb807", "sighting_of_ref": "indicator--01029d70-6e66-4089-b202-40659bc2844d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924188e7-1b93-49e2-9e9d-2e5fb5b24e4b", "sighting_of_ref": "indicator--c04e438f-52a8-40cf-aa7b-3e138cdbf0d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdaf05d-a81d-4152-b126-5cb28321c322", "sighting_of_ref": "indicator--52566b35-cb46-465e-a0b2-f32d2d328b64", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f93e07ef-2eb8-4b56-a229-d267e45098a5", "sighting_of_ref": "indicator--ad340c50-740a-4998-8c99-485674d26f7f", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368fa4f5-11e5-48ce-bde6-cae5d9b7560b", "sighting_of_ref": "indicator--cf2215dd-10ed-42f2-b2a8-85387b4d306c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926a387e-358f-4500-a843-ed7f4342e073", "sighting_of_ref": "indicator--f4837f8f-3575-4b6a-b90c-9ae7328c49e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db609b47-f1d8-4ca5-80c1-e588a55f939b", "sighting_of_ref": "indicator--b6dfff00-13d3-4b1a-ae46-5abd221d0b4b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726015b6-f543-4277-8211-88385ed2bfab", "sighting_of_ref": "indicator--8bd62595-13ee-469e-8731-598c15074cc9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e22e94-2b1b-437b-b665-a4c86ed9d993", "sighting_of_ref": "indicator--ef097a3e-6987-4070-aadc-2d09e77872c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d0c722-f670-4937-8764-b2f2f9bb0ed1", "sighting_of_ref": "indicator--a36b3b9e-d350-4fdd-8e99-e7ca066a4ada", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ad418d-bc6e-4f7d-ad41-be4e5ab0f2b5", "sighting_of_ref": "indicator--671cd4b2-f902-4519-b7ca-aacee95ac9c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300fc5b5-bcb3-4601-9fee-6b9f6809a153", "sighting_of_ref": "indicator--4cedb437-e443-48ac-9560-8307267ebaf9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24737ab7-3ffb-4e82-8960-7349bf261325", "sighting_of_ref": "indicator--173fc021-6953-4172-859e-56df3c8ca993", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4c2808-8399-4ee0-bd46-959c9a8ee31e", "sighting_of_ref": "indicator--25c18d38-6cf2-448d-a11b-c85eac1938ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dd4ba79-1d9a-463c-a3e4-89226bfd6168", "sighting_of_ref": "indicator--7abb3aec-d41e-43d5-ae44-dc81f3cc67d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c877ff2-c80f-4575-9376-62d07867830f", "sighting_of_ref": "indicator--358114f7-7c32-4665-a6ed-884b3088271a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0b63d0-7c48-4691-8a74-be67ffda850a", "sighting_of_ref": "indicator--6432ddb1-78d4-4fb2-9516-a635e84ac319", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b144cf6c-e327-4244-8d3c-b5ae48d6783d", "sighting_of_ref": "indicator--06eef9ca-1670-4c95-ac7e-f6217149c528", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4255eb21-615e-4f60-8cd6-5fd570517c6c", "sighting_of_ref": "indicator--d5db232c-dc2b-4aa9-95a5-7c124622d436", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23af6a8c-82de-459a-be3b-b077c2523c7f", "sighting_of_ref": "indicator--bf7b9deb-e398-4e14-8247-c3cad8894566", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--820fe4d5-f43e-4f0e-9dba-94deffde22a3", "sighting_of_ref": "indicator--bbcc067a-2ecb-426e-9070-1839aaab2709", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e921bd6-3b7d-4a04-be06-318114a6fc92", "sighting_of_ref": "indicator--429065c1-c79a-44f7-b3e6-8f206eb32304", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6204e522-e03b-44a0-b9e6-08e124661109", "sighting_of_ref": "indicator--5c386320-f8b8-41de-9e1d-3368025b7ba4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7726bae-5dd4-4e1e-b09b-06c40445f093", "sighting_of_ref": "indicator--68c522ef-484b-4546-9f2e-eaeb3f5ea004", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340ecd58-e523-469a-a079-a9bbca989f0d", "sighting_of_ref": "indicator--ddd30a8f-d0ba-4ce7-943e-9b0508dbe4b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--107f7146-d0b0-42c3-be44-755a8c7c32c2", "sighting_of_ref": "indicator--dbbc2ce6-ecea-4edc-bec1-85e2bae6ef58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75190abe-9c6b-4127-9f85-7b6df2b09ed7", "sighting_of_ref": "indicator--cc5937e8-9352-4633-805d-59e6c93d983d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb85aee-235d-4582-8479-105a18616772", "sighting_of_ref": "indicator--0c3ffd39-08ef-437e-9492-b5c0e4b76556", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6782565-ac6e-4413-8d60-783b43b7f30a", "sighting_of_ref": "indicator--40fa98f6-d822-4a13-b89e-94fe78fe4587", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a0d773-83ca-4f96-84ef-aef7ab370626", "sighting_of_ref": "indicator--ede44c16-1f67-49b9-950e-f72e9e846eb1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275c7892-5437-4b98-8f17-be4392ec5aaa", "sighting_of_ref": "indicator--018f1187-8d10-44a0-93a2-00c2a998e596", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16806145-aca9-4f7d-81c6-aac747d857b1", "sighting_of_ref": "indicator--ad8a6084-6d10-442e-8fda-2d8e283daf27", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6cf4cc-280c-4aeb-b4ee-9b3fe2206e4c", "sighting_of_ref": "indicator--78fe48ec-57a0-435c-9fb4-0883d850dc92", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ae79b7-de08-430b-b48f-eb09d3139c6f", "sighting_of_ref": "indicator--da6b741d-c760-4966-94a6-523781ec506d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e382e11d-692b-4192-948a-6823bba87b66", "sighting_of_ref": "indicator--22c055d6-1644-48a8-96bb-26edddee250f", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521e2c83-48e0-4ccd-9eda-0976105509c1", "sighting_of_ref": "indicator--8452b55e-2fa1-4ecf-aec2-1c443e180e50", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656c7b32-a99d-4606-84f9-be18b0558580", "sighting_of_ref": "indicator--bfd98593-fe4d-4e14-afaf-5a0bbb0d0735", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d11d9af-c12b-4fdd-be4a-ffc61cd007cc", "sighting_of_ref": "indicator--0313d005-ad9f-4c2d-9235-5a08e816908a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a99b8e4-350c-4fdd-b191-4a2bbc16b12f", "sighting_of_ref": "indicator--ca4b076d-323a-4c1a-aa1c-263ba8d73eee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d61b463-25ab-48d6-82ce-363c0f82dc53", "sighting_of_ref": "indicator--c1a80b4f-3e2e-4202-8b33-d1ea3ee0d473", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bdbf37-4436-44ae-a1f2-f92ae3ecfaa1", "sighting_of_ref": "indicator--dcf7c223-3604-470e-ba0c-8ca501e9de25", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442bc35a-5e06-4714-99e1-9fc622648eee", "sighting_of_ref": "indicator--5e719b91-1933-42a6-9985-9a50636832b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ebd94a-b24d-48e3-b4d0-12b30ca51903", "sighting_of_ref": "indicator--ea7a8b30-6e83-46e9-98db-f35bef688a2c", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f67215e-c8ac-4bc1-b9d0-ef3668f854e0", "sighting_of_ref": "indicator--98437099-b5f3-4e1b-8ceb-81419601edf3", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b10b53-916e-4ea6-9c0a-5c66c2c0c889", "sighting_of_ref": "indicator--986dcda2-3d08-4730-bfa7-f961545bd590", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ac486b-3745-4f48-836f-13a5826a8167", "sighting_of_ref": "indicator--dcd7eebb-80c9-476f-9c02-a21ec90213ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abef9b7d-c548-48a5-8e34-5fe0343f02ca", "sighting_of_ref": "indicator--ea26e1ef-0663-4089-82c3-444e4bd67608", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208af964-74d0-4313-a93d-558f328cadb7", "sighting_of_ref": "indicator--df16e030-2724-4164-8a09-b806b22a86d1", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b033c15-6c78-4c3c-bf90-19d1f92ddeb8", "sighting_of_ref": "indicator--6fc37900-e738-4c6e-9f64-33e8357a9bf7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eaa7005-cf47-4f16-a80c-ba97026f978b", "sighting_of_ref": "indicator--bd3a2ea5-b2f6-497e-a740-f070f5f096a7", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76a1486-04d3-4a6b-a615-c3a288a64548", "sighting_of_ref": "indicator--dd4ace3d-ac66-4e4f-b4bb-8aa7d2f3673d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a92a5c9-ca12-49da-aa6a-1a998c9387a1", "sighting_of_ref": "indicator--e2b635b2-2f4d-45ef-abce-dc04aa6ddf12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fbb0df-007d-458a-b865-c3e702a2d400", "sighting_of_ref": "indicator--d0b2075c-4f1b-4fca-877d-d650933cd4f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3b75af-18ac-4a63-8d95-6745dd66060a", "sighting_of_ref": "indicator--f58c3273-2dc7-4aec-ad93-5623ec4792cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9420b552-72ac-4828-8551-fd807c9df9f8", "sighting_of_ref": "indicator--1c8b259c-9caf-40b0-a632-5f75fd8287a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17e7e9d-c87e-4a60-b2da-85309cccc001", "sighting_of_ref": "indicator--4e3ab0c3-47b9-4658-8ea7-15136532b85f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003a8744-92e2-4c3e-ad62-6145621b0bd8", "sighting_of_ref": "indicator--d69b9848-52fb-4ad2-a268-9287e7ee8f4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51e7af4-8714-4e65-99b6-ce0dbed6a30d", "sighting_of_ref": "indicator--d6cb49f5-c053-47af-b960-5af6ee306720", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1713101e-21fe-4426-b6d4-73eb5d76d6ef", "sighting_of_ref": "indicator--0d1572b5-ab8b-43f4-9212-87e4800dd606", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1880ecc5-0cd1-47d5-a7a0-10a2ec5f9b43", "sighting_of_ref": "indicator--2fdd4f17-bdf8-438f-8b73-216a92a496e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594cf3bc-b267-4a8f-8ec8-ac00f5e503e3", "sighting_of_ref": "indicator--79066425-3c50-45e1-b11a-74f6b151a671", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e23c764-f8b4-47eb-9ea8-1f53b445e040", "sighting_of_ref": "indicator--67c3149b-064b-4a8e-8299-159e0c327ed9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292f35ef-0102-47ab-a060-6eadb0c1d983", "sighting_of_ref": "indicator--055d0010-bf19-4ce2-be13-ca0b25ba85d4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114c1590-c419-4947-88c2-cc5d968a841a", "sighting_of_ref": "indicator--7f626e30-5437-4299-b05e-06bd746ccc95", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6328be12-9541-452b-9c1e-2e9884ea0059", "sighting_of_ref": "indicator--836d2f36-534f-4838-bbfd-9ba15e2d233a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fa858d-5b69-4d14-9818-5e2c35e42fd3", "sighting_of_ref": "indicator--12d4fe52-9eb6-43c5-94f6-e9058e330409", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6405686-31fa-48c8-b242-c80a844433fd", "sighting_of_ref": "indicator--f5844f6a-5c98-4506-8f75-17661b4e1de6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f0b7b7-eaf7-437a-bf9b-adfb92dc8c2b", "sighting_of_ref": "indicator--8dc5631c-b01f-415a-a0b8-6e32a8f1cf71", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3786672-46b7-412d-a685-dfb6c687f47b", "sighting_of_ref": "indicator--c5e6e546-1fb6-493f-97c2-b7cea32f0002", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be19e6f-33d3-41ed-8fbf-d70e37448f85", "sighting_of_ref": "indicator--053107f8-b936-4dc4-bd1c-564a349037a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff422955-0ddd-4091-ba7b-08148a44ade7", "sighting_of_ref": "indicator--5a03ecfb-0a79-48cb-99f7-e6a8ec7e4bf3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf9859a-12e7-491a-91c7-bdb5575ef99e", "sighting_of_ref": "indicator--0282f76e-b925-4951-bc56-1d9cdc8151cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21293b80-a81e-4470-a320-95764decaf3c", "sighting_of_ref": "indicator--c893d0f1-7406-4662-8e16-d0d1c3e82211", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789eda1c-a0da-4082-a0e5-9e09a367ba51", "sighting_of_ref": "indicator--78307a07-5c12-4d45-accf-efcc25916392", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9f7133-bce7-471b-bb4d-7dd04682ab1e", "sighting_of_ref": "indicator--534bae93-68c0-4f02-91b1-d6a024a7548b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4895289-73fa-4c05-b714-61dd7a0b93f6", "sighting_of_ref": "indicator--c3f9288a-e967-4408-96c2-5fefe913719a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905e98c6-9656-48d2-898a-021d16f84ed0", "sighting_of_ref": "indicator--1d0b1e9d-2929-48d5-b8fc-5133108a77ed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be6d1436-6ebe-4160-9276-15ff198097fc", "sighting_of_ref": "indicator--c7e64ff7-eb3f-469c-b8ac-5db6a3aafd6f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395d9b52-9ab9-45d0-8229-9d1669b8c1a0", "sighting_of_ref": "indicator--e6b1890d-9898-4675-9030-4b1394001dcc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96a19ac-c0b0-4d47-bbab-2344d8469eb7", "sighting_of_ref": "indicator--79e125fc-5fb3-45f4-a55c-7af91d028a3e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a97690c-36c8-4b23-8f88-e0b8fa58d2c8", "sighting_of_ref": "indicator--2e5fc250-c542-49c4-aca7-d7d72b4d1c3a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2c8311-02ad-45ad-a33e-dec74e100974", "sighting_of_ref": "indicator--61040ca9-6a4d-458b-9330-5e3efe281487", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46928415-e512-4442-b50b-bc2e0df56ac5", "sighting_of_ref": "indicator--8f72da44-5918-41b5-95fe-6e7dc421abdd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc43f9a6-23f8-4ab4-ad6e-e9ba18d32c21", "sighting_of_ref": "indicator--a7636f2f-688e-4116-9d6b-c8278b98a164", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c20fc6b-6a65-4161-8752-e8d85b043290", "sighting_of_ref": "indicator--3cc5859f-1914-4a8f-ad19-80e2eb58631b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f03cce-80e6-4344-b8fa-8e27ec675a5f", "sighting_of_ref": "indicator--b4552dcb-1f36-4c46-b46d-456c9feff34f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0151e3a6-555c-4226-be4b-7a80ec30231f", "sighting_of_ref": "indicator--7243a852-f584-40da-928d-8d1cddfe4759", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11314c6-7926-400a-a9f4-02bc918b7a21", "sighting_of_ref": "indicator--6149875c-056a-426c-8890-ab7813df16aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee65393-0daa-4b13-9ec7-8df7b61d672b", "sighting_of_ref": "indicator--d6617092-c5f7-4992-b7f6-fda906705a5c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af3ae79-b107-4d54-956a-cf50c9598d00", "sighting_of_ref": "indicator--d9f90e97-8210-40e1-a6fa-4356f2580e37", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9f82af-1f9b-4415-85fb-e0e3166ac109", "sighting_of_ref": "indicator--70734c2a-c1ce-41e0-96ff-85a8d0e95cf6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d337e8f-839e-4894-b689-400d9f924f24", "sighting_of_ref": "indicator--fbcb3072-ccec-4e48-927e-554e22f8b065", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c534821-d0b2-4fd5-bf70-0ba068c33d50", "sighting_of_ref": "indicator--e7f3f541-df76-4fb7-a65c-626b4ac98090", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068e4bb2-3149-4662-8c4b-63efcc308d7f", "sighting_of_ref": "indicator--854fc34a-4678-4c4a-863f-bde97a18573e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8655faee-b13b-4b82-a157-8a6891f2d20d", "sighting_of_ref": "indicator--c8eb8f97-e8d0-4ac6-aa26-6450e7f843e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd8f22d8-a6fb-434e-8f73-abcda4888431", "sighting_of_ref": "indicator--a11989c8-27d1-493d-845f-6484798c9535", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77f6f59-2ceb-4b15-b913-8cb53497ab81", "sighting_of_ref": "indicator--cfe803e4-d2f7-4556-a8f4-7874df69e9e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed666e62-f43a-40c8-a859-73b2aecae8e0", "sighting_of_ref": "indicator--2038026d-d819-4f0b-8400-fa825754684f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3989d5a3-861e-4175-b467-b83edab1f7b0", "sighting_of_ref": "indicator--ef2036a6-39e4-45c1-b22e-5d1d59d212c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e212d72e-d7e6-42d3-8482-eb5ec77b6ada", "sighting_of_ref": "indicator--674edf57-e340-46bb-88bc-baa87f5997fe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1950f40-029d-4376-b728-b654f49aec35", "sighting_of_ref": "indicator--94d70080-8c25-4036-894d-55f182a2828a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9417e6-0df0-44d4-aedd-c92f0b2cc3f9", "sighting_of_ref": "indicator--a116139a-9c7a-49f9-bbe7-6ae046c079f6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91ec6ee-e023-4a1b-8492-c53b1afd4c9e", "sighting_of_ref": "indicator--d2d13684-7fd4-4ad1-8186-3902bd71bbef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ad9405-80ae-45cf-aac0-c71c7745ef6a", "sighting_of_ref": "indicator--8df2f806-258b-4db3-a527-a48133ac906b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb2e2ff-6502-426e-bec4-59bb9f53843a", "sighting_of_ref": "indicator--4a33dd7b-e8f9-4fa2-92ef-583d5ff22219", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da52d3e6-d23a-40a5-9e90-68b401c3590a", "sighting_of_ref": "indicator--19fa76e4-3b72-4f4c-a3e2-0db6848a157f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a561893-60f3-407b-95b9-b3655b92b765", "sighting_of_ref": "indicator--ca0898b8-a365-4a9a-9d04-10e69443c3c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7235e741-1238-4f94-b4b9-255bee47ec7f", "sighting_of_ref": "indicator--bebfb185-27d6-4c50-892b-12553b87ef42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35fca944-670c-44d6-92db-cb1f9fcd0782", "sighting_of_ref": "indicator--59f4dc0d-2970-40b2-885c-5c43a797f2ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c70c779-73b3-4944-9156-0d72aab66a7b", "sighting_of_ref": "indicator--c70f2c03-3516-424b-b0e5-c32015636e77", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcda32b2-b323-488f-b8eb-db7d20543d13", "sighting_of_ref": "indicator--caaab6e7-5d5f-43a6-bef0-15aaaebdb867", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f63f4a1-dcfc-44e2-be35-8bd80ffb8f26", "sighting_of_ref": "indicator--09b28854-231b-470f-92c9-fa99817ae121", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce82c15-7e3a-403c-b2a1-c220cb288c4e", "sighting_of_ref": "indicator--37b3202a-efeb-4489-887d-2377ce4f7caa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b0eb86-5214-40d5-8dae-28d5d1a1b17a", "sighting_of_ref": "indicator--2ffce772-10fe-432a-9eb0-4f32e2b12e12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--208f0a0d-4705-427f-8c86-4c87ef33b067", "sighting_of_ref": "indicator--c2ec8c05-739d-4e7c-bff6-ab5c4e774d86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060133d0-8510-45ee-b9fa-6d207b264015", "sighting_of_ref": "indicator--076da78f-edec-4b51-a4dd-3f7314bc409a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74505a24-63d3-43ca-b754-b22e86704261", "sighting_of_ref": "indicator--1677fd64-fbec-487f-8510-d0ed29d26766", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af77bb8-c114-4a8c-a590-1d75de62440d", "sighting_of_ref": "indicator--5f74aced-d2be-497f-9b31-8d077e9e33c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243dc8f0-83d4-41d7-aa28-6cb34ff0ec4d", "sighting_of_ref": "indicator--7a9e3fd2-78fb-42c5-ad33-c3023561655a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670b67dd-dda2-4308-9913-276d3f2dc22f", "sighting_of_ref": "indicator--f8ca6569-3fac-4d03-808a-95ef8f29c8ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a08888-6c7b-45a1-9c23-82f2337297cc", "sighting_of_ref": "indicator--21001596-0174-4fec-a777-861634201624", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf4306c-f046-406e-9c8e-0a38017143b3", "sighting_of_ref": "indicator--2f88ae75-d8f2-48db-a0b6-e7626fa7a092", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407811cc-3fef-4230-851a-457c8da04cd5", "sighting_of_ref": "indicator--626ab70f-cf1c-46cd-b426-5d2e902e3aaf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf08171b-92ff-4d73-9b84-7bc6f3fa99f5", "sighting_of_ref": "indicator--fe67d7d2-c43a-47ba-aece-9d70d9739b4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f820fa-74ea-40a5-b4d6-48d925bd7b79", "sighting_of_ref": "indicator--0c075fbc-b4a8-4878-bb33-443fc457470e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3320b001-c825-46d0-9dbf-4136c49b1922", "sighting_of_ref": "indicator--345210d9-1579-4580-a0b2-c2284e3674cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c623cd3c-f8b8-46e2-b47b-fc61641e29d6", "sighting_of_ref": "indicator--e7ddb796-792f-4732-b9b4-5db0bff5a933", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb65667-817a-44cf-9e2e-08cf0b53ee2d", "sighting_of_ref": "indicator--5f682f49-c370-443e-9e42-3d49474cb46e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800a2571-0a18-4989-b3d5-a4badc670ebe", "sighting_of_ref": "indicator--7245fe37-52b1-418d-9b19-9ed548bef24f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2481c7-429c-4148-a595-a96365eb0697", "sighting_of_ref": "indicator--8fe96cda-1efa-4652-bec5-1e544f54e714", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d7a52ef-c6d5-44e4-a154-4efd65326564", "sighting_of_ref": "indicator--541ce725-f832-4889-912f-bafec82e1089", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f688e6e3-a819-4455-80b0-9986c0f1b665", "sighting_of_ref": "indicator--7a85b31f-1c7b-4a6e-a6d9-92940609375a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df177180-bfba-4f32-895d-717e0bd8c08a", "sighting_of_ref": "indicator--84078415-57bd-4048-9bb6-2b9f38d5d7b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6e77f5-9dc4-4631-9290-0fdd00efaba7", "sighting_of_ref": "indicator--a2d1778c-a194-465c-bb7f-f3085d6e79ed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f547b53b-9fc2-4ab4-8f7a-822e8c1b36d6", "sighting_of_ref": "indicator--4440d84b-3845-485b-8487-1f9dec1a45c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb8e54d3-07f3-4438-8c36-9417ca5b8bb0", "sighting_of_ref": "indicator--c0a4a5fe-ca23-40f7-84df-3bf1507939f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3745bd02-4148-4a13-a828-24ddaa12c052", "sighting_of_ref": "indicator--a3764197-d886-41aa-899b-c564f94a0771", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a6b7cf-0dc9-4b9f-8790-464091553980", "sighting_of_ref": "indicator--e6eb2645-9432-47f9-a4de-793715c11fa5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc43b92-b696-4001-bc00-b7e35e1fcffe", "sighting_of_ref": "indicator--938ecf17-bca4-4bd0-b6c1-5a0cc97071d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6141a0ee-df62-487c-b55c-293e5e1b6f77", "sighting_of_ref": "indicator--859c1be5-8dde-44ba-921d-20715799c1d1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f1a0b7-01aa-435f-8358-aa097b4cca8c", "sighting_of_ref": "indicator--66be5a88-6045-489b-bc33-faf57501838b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d3ab45-e342-4aaa-85fe-8121fa030a8a", "sighting_of_ref": "indicator--31a8b92a-6306-452b-80c7-c34da17384d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9cce64-c66a-49ba-a1b3-68a6a35f49ff", "sighting_of_ref": "indicator--85a79d2f-59cb-4209-b201-c395b089d75a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611e7573-042d-498e-9ef5-8ab57243ddc2", "sighting_of_ref": "indicator--ab71bb32-22d3-469b-b864-6b53b7d2959b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5082b3-f02b-4c00-8f08-50a41689058d", "sighting_of_ref": "indicator--93c98242-fd3a-4a1e-ba60-596608648ca4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d653711-8a95-4aeb-b058-24490eac0bd2", "sighting_of_ref": "indicator--0013a9cd-710f-4654-9a64-9c1c3d6638c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6056be-a86c-43e3-a0d9-56bf37a0a0d6", "sighting_of_ref": "indicator--97e2f980-d01b-4bf7-b815-0d0d1403e532", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--497ad5ef-ee3c-4306-8d77-78b07c06ce4f", "sighting_of_ref": "indicator--4fcba630-453d-4bab-b45c-8de04dd27506", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c09eb3-1fa7-4f8f-b64b-5b4eccd1572c", "sighting_of_ref": "indicator--1faed129-1fcb-4325-b671-9bcb0ca178a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798801f5-43f7-4e48-8ef7-b3d6d446102d", "sighting_of_ref": "indicator--ebcabaaa-b7be-4182-bfe4-173ce50946b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9d9d2c-1d79-45e8-836f-9c8ce62e40a0", "sighting_of_ref": "indicator--5a9f5479-6331-4a61-99f4-2d87bc74df48", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0e99fe-ef15-4ef2-8af6-aa76fc4fbdde", "sighting_of_ref": "indicator--99f7f334-2ed5-4731-a050-52fed971c8b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed479dec-3bc7-499a-88d7-0766d2de898c", "sighting_of_ref": "indicator--7672f526-b0c2-4d36-b608-b00735b7640e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c679528b-a5ca-4ec7-9a10-62cc02b3284a", "sighting_of_ref": "indicator--57f1cd4d-4e97-4ebd-b163-d22b6a4c2c0c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fd5a6b-048a-4642-aecb-73d107893219", "sighting_of_ref": "indicator--dcca9bfb-cdfc-4a89-9e83-677232342a34", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c90501b-9e51-423e-98cf-b87af2276197", "sighting_of_ref": "indicator--687ac0fc-ed40-4603-9a75-547d7c4576fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9e7487-4312-4f8f-9122-1d7db7aa5ae2", "sighting_of_ref": "indicator--965e6187-4003-424c-ade6-2380dfc45ddf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e7e3da-abfe-48e9-a2db-9c7110a8d753", "sighting_of_ref": "indicator--db733668-fa8c-4e41-a2a1-73ff9d92e943", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd307236-373e-42b2-ad3c-3be790fbf568", "sighting_of_ref": "indicator--8f53c654-db53-40de-a8f8-f35865913834", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e388976-a8b2-428d-9f96-96bbc3cc61e6", "sighting_of_ref": "indicator--fdb35cd7-c14f-49a8-a2ce-617bbf7ef84a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46765ca7-7142-4dcf-8d97-fd09461d360d", "sighting_of_ref": "indicator--ffa56ae7-f09f-46b1-83ab-3fa15c0ae778", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed96013b-2dd1-4ceb-92ab-6ea756758c4c", "sighting_of_ref": "indicator--0cf96029-264c-470d-a603-ff9556d3a443", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d056dd58-ca53-4211-9121-29de0d6376bd", "sighting_of_ref": "indicator--79859da3-6778-487a-8fa7-f6d0a76dd7c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e36bec01-43cf-4548-bc9a-4dd7a18f55f7", "sighting_of_ref": "indicator--717cf4b2-6b41-4ac3-8cb6-6724d85e5ce1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--693e1673-8c52-4154-b0e1-8d8ea6035b11", "sighting_of_ref": "indicator--f4ece1a9-7ff0-457b-b1a2-760756e9c6e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745a92f8-1187-4df4-b121-132d53465ed8", "sighting_of_ref": "indicator--80695c97-016e-49f3-845a-d33840699dc0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82928f73-9a7e-4cd1-84a0-04cae1349192", "sighting_of_ref": "indicator--40a8c363-3590-4579-b2e2-5cb216793f72", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553f743a-99ef-4637-91ed-a6082e77e92f", "sighting_of_ref": "indicator--1dbc5029-711c-4c64-8579-c199fdbd0beb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b8b05d-1874-4307-941c-a2f8f098e18d", "sighting_of_ref": "indicator--c11a1b9f-3c67-4109-a2d2-5ce17b3e5ace", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7198ce-02fd-4b04-8b15-87a082c03e96", "sighting_of_ref": "indicator--cdadcf83-7d55-45bc-a8a3-cef6e99a4a03", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b6454f-9aa9-40af-8c6f-9e6cbd12f3aa", "sighting_of_ref": "indicator--03e7177e-2b7a-40f3-a8c4-1ff55cb2183a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efe0606-4abe-409b-a80c-ebc72ddcfb63", "sighting_of_ref": "indicator--15aa7a10-54da-4cd1-8482-50f1dad38dc7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168cadc2-8d6a-4d4d-96d4-4764c1b4d3da", "sighting_of_ref": "indicator--5aaaf4cd-827c-4ade-861f-f9aeebaacdc9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b2a7af-b062-4901-8367-015d48a8b4fc", "sighting_of_ref": "indicator--09dcdcd1-d9e4-44dd-a711-8f7ad0824cc4", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3865d8bb-ae93-4a98-a80e-444f21fe5277", "sighting_of_ref": "indicator--0a360dd0-1387-4cb0-8977-da3ec11f8b1b", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8596e858-9628-4700-961b-68f964d3a5f2", "sighting_of_ref": "indicator--1c21e0f7-c90f-4031-85e7-000ba694f533", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d3d2384-7fc5-4fd5-ae5b-2710051ab72e", "sighting_of_ref": "indicator--6a059d1b-6ee3-4901-8d11-6d38deea1054", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8db672-7716-4443-8073-0b4080a73317", "sighting_of_ref": "indicator--caa089bc-317d-4eff-96db-ac44fe80c0a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0456b901-f0cb-42e2-b33c-d9c4e1f0fe72", "sighting_of_ref": "indicator--6375f330-5503-4986-b352-9ad6522823a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b593e3e-48f5-462e-b1c8-d3ef6a91acae", "sighting_of_ref": "indicator--2bdbc73f-49d1-47e8-8a42-438ad543be72", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004620e0-a962-4e52-bc43-10a606b7620c", "sighting_of_ref": "indicator--e4aa4ba8-a01b-4087-b628-f271b18ca55e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61921a1-089d-4eab-8372-9bbdf7f71967", "sighting_of_ref": "indicator--ee8c054e-54c3-4376-92e8-6a9233ba3abd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a109861a-8d63-4fb4-8f6c-99cb667a6a3e", "sighting_of_ref": "indicator--5a610811-0098-4b3c-b325-393ea01d2f2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16c7e3c-9f51-4be3-b4da-57ec75392704", "sighting_of_ref": "indicator--ab85469d-82f7-48d9-b4bb-9335875a4bf5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1803a0-b867-4a20-be6a-b86a2f426d01", "sighting_of_ref": "indicator--1908fbb4-61c1-4cb6-a723-58bbff4b0e57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c2b3b4-16be-4dab-a377-6cca7cc89c81", "sighting_of_ref": "indicator--64a618c8-c18c-4199-82f9-4a353ca3e10f", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1ae494-c29e-40a4-a546-5bd221966121", "sighting_of_ref": "indicator--1c7cf407-6f28-463f-ad84-79f2837e5661", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b645f4-6bb5-4ace-90c0-45c4b49bb0c8", "sighting_of_ref": "indicator--9ebca343-0966-43cd-944d-55070cc6edac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c77456c-911d-404f-afd6-a218329fc812", "sighting_of_ref": "indicator--8890e4b5-41e4-4515-99bf-3e1c798b6898", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da0c89a-f7ff-493c-b004-9418d1ab2151", "sighting_of_ref": "indicator--3b9ae0df-c119-443b-8f5d-c3ad8f012bcf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de35f0c9-8eba-47fe-b106-5543da0af7e3", "sighting_of_ref": "indicator--b5ce061d-827c-46d8-a52f-e6d946370249", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c20319-d9c0-424f-b97b-125845136c5e", "sighting_of_ref": "indicator--a10f493e-2393-4c3d-8639-3a01990b3b28", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a1ad52-94f6-447b-b494-2489cda2b876", "sighting_of_ref": "indicator--56d4d543-1b6c-4756-a065-26090138e1e9", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b5d43a-c501-4864-9666-e347e68e5411", "sighting_of_ref": "indicator--08d483bf-9dc7-4bc3-9450-8a1d6d5269d1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a72e6c-10f7-467b-843e-c3fd409be894", "sighting_of_ref": "indicator--9cff7301-e774-4e89-8b39-c6181f8e8a45", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3f2a98-3cb1-466c-91f5-512aa94d6502", "sighting_of_ref": "indicator--fa69492b-bb9c-41d0-adcf-0ee6764ab11c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9857e0a3-d234-49cd-8e48-89c68b5d0de4", "sighting_of_ref": "indicator--70afbabc-2f54-4aeb-bd7c-f25823309c40", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--770e774f-7bea-4ea9-be3e-94de14246c42", "sighting_of_ref": "indicator--f5ad7905-acc7-4a4c-8ecf-6feaf2638836", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13dcf23b-b0a1-43ae-964c-2534d485d9f2", "sighting_of_ref": "indicator--30f1e528-e675-43f6-86bf-5245906b1a2e", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b09be1-cf58-409e-bdef-285770f65b5b", "sighting_of_ref": "indicator--9c0af2ea-47b6-456b-b01e-d21a0dd425d8", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f59cba-ce21-4fec-9599-4db23d552856", "sighting_of_ref": "indicator--0fc4cf64-00a0-4b92-bf8d-70b916094d47", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb22e99c-f644-48bb-a46d-da7902aa5ee3", "sighting_of_ref": "indicator--088d74b6-1240-45b1-8054-25a4464a8987", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd8d1ad-2cad-41e2-aa76-f2966c1fd996", "sighting_of_ref": "indicator--716ffbd3-554f-43b2-b914-f5240fb985ce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccfb1e6-be65-478c-a2a6-0867ce59c98e", "sighting_of_ref": "indicator--cad22cd9-cdca-4250-a388-fe6ec6a809af", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92131b3-aaa6-4fc7-a6b0-3e387974d94b", "sighting_of_ref": "indicator--80db15c6-462b-4d62-9c64-9018b9b19e38", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39eaf20e-7578-4989-af76-47ecf7d15d60", "sighting_of_ref": "indicator--739dfbb3-45df-4882-8d23-94c57594bc32", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837f8093-198c-4b72-a260-3f08834a72ca", "sighting_of_ref": "indicator--193e4f96-9995-49da-9dc9-fbb9655bb3bf", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6a62b3-f28c-4359-bf6e-7edb3abb8f82", "sighting_of_ref": "indicator--82d75807-e6ab-464a-a04c-b13877d38be6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e28535-7cc2-4cdd-b6fe-55c85106e5a2", "sighting_of_ref": "indicator--0bda1f52-961c-4e9b-ad81-f1163ecbaa7d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd9efb1-bed2-435e-ac85-b289554b09da", "sighting_of_ref": "indicator--5cbe3a43-49d9-47ef-800d-43e253975f33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ffcd7b-cc25-4a70-beea-c8a670f1ffb1", "sighting_of_ref": "indicator--72788532-aa2a-4f25-9453-6556a2677407", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4cc96d-3abf-470a-902f-b938a3b9ace7", "sighting_of_ref": "indicator--f5fd1af0-88f9-4ac2-a623-bf56be331446", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d22356-9ea4-49c2-9dd6-e85aeac954e8", "sighting_of_ref": "indicator--eec18e03-142c-452a-8103-353a4fc14684", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddf011e-4600-454f-8bf5-f560faccd2b1", "sighting_of_ref": "indicator--8dafcc9e-0743-430e-8c6e-034b68fe9a43", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219373e8-5efc-461e-be6d-6701a7dc385c", "sighting_of_ref": "indicator--8a1c9ede-c2d6-4e24-9162-fc50f7be384c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4d43e2-003a-4b09-9c61-6054a670409e", "sighting_of_ref": "indicator--eca4488c-e358-4356-b072-84aa3ea2ae02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db00cb27-0bba-438f-9a90-9d794badb5d4", "sighting_of_ref": "indicator--b6cba06e-9ed6-43e4-91d8-cb9bf3efbaa8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221f2095-86c8-40a3-ac4e-393e4881a060", "sighting_of_ref": "indicator--f74085d2-48e7-4c7d-8c05-56e6bf0f144a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c7f875d-35f3-4dbd-84cb-6d65da138f98", "sighting_of_ref": "indicator--13a67a10-d0c6-45a1-aab9-cdcf9ca8c1e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f886e41d-bd14-4aa8-877c-f0e5d9aeff3b", "sighting_of_ref": "indicator--62890f90-5503-4803-9bf4-9087c6f10c1c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef0fca4-58cc-4589-8a9b-17acea319737", "sighting_of_ref": "indicator--68b74713-2847-4bf5-8734-9bdd15be0d3b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cb45a3-da4d-48e4-bbf3-f995674fdc12", "sighting_of_ref": "indicator--5890b56a-5e71-4b27-a500-9cc742ea59d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf519da-c467-417c-8b0b-41b487f83be7", "sighting_of_ref": "indicator--6ed76df8-4dd5-45d2-9219-7346e02671a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93040752-2df8-40a5-905b-89c6cff277c1", "sighting_of_ref": "indicator--c307e869-3eb6-4422-9211-a28b5a30eab8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee6c3a7-f739-4cc2-8e2d-fa867098db5c", "sighting_of_ref": "indicator--1442ffd9-598e-4266-be74-54529660a8da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6c633e-4f83-4f2b-8f7d-37554031b9b1", "sighting_of_ref": "indicator--d18309c5-45f8-45e5-aef7-8f0005a14bcf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e878bad-4936-4544-a5c4-8fb43784511d", "sighting_of_ref": "indicator--5986e779-e5dc-4b3f-ad37-6d124f5c1dca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d783cb-c9c3-4042-8395-aecd9a051fa2", "sighting_of_ref": "indicator--261b0f32-899a-497e-9d96-b3408faec2e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca78365-2661-44ca-9af4-3e6029b3f25b", "sighting_of_ref": "indicator--17b3baf3-7f7c-4000-b732-1fa7045e36b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4046029a-42d7-4823-b39d-a957dd46964a", "sighting_of_ref": "indicator--a7447d2d-54dc-4318-8691-41d278cdd8e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb21124-f378-44eb-93e6-abef51e73d0f", "sighting_of_ref": "indicator--278c1289-2c7c-48a5-b0c1-6283dd39ecdf", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89726a4d-0bf3-4164-945d-937c748a7b4a", "sighting_of_ref": "indicator--964adb08-13c9-4289-9573-19f30b8e2f58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88fd709-efa8-4a95-93a9-9c5d1dce6113", "sighting_of_ref": "indicator--cebb4c83-fd32-4809-938f-54e62d5e8c9b", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccb234d-23b2-45d6-b536-ac167b6db44e", "sighting_of_ref": "indicator--4f297709-4390-48c6-bfd5-025de256ba4d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a76e336-5b0d-4b9b-a380-c7bded4661b9", "sighting_of_ref": "indicator--0b2a58b1-c6e9-4348-a802-c1aac258fc5d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd58d79c-4b7a-4075-90a1-0f7916f87cde", "sighting_of_ref": "indicator--c2c6e59e-270f-4a0a-80b8-2c1ed6da7110", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5073c655-23eb-4396-896d-69d9e9a071a9", "sighting_of_ref": "indicator--eb8fdda0-ec95-474e-9df3-fe2b9d0bd80d", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbc880c-f17d-4353-ae1f-a6c5bb958077", "sighting_of_ref": "indicator--7d74584b-1845-4fda-a012-e1d372e1a36b", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9227dc69-a3d7-4393-ba46-5693492dd217", "sighting_of_ref": "indicator--506e805b-3e9a-4bb6-a6cf-5f8438c58567", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da349986-1fe5-4db3-bdbc-64cb95d2395f", "sighting_of_ref": "indicator--4c65e5eb-4350-43ac-98fc-d2485dbd61fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac4c62ee-8e16-43ae-8fca-14f8d4adfb4c", "sighting_of_ref": "indicator--8cc518c6-38bb-47d1-bdb8-ab8d08f7e18c", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a0193e-86d0-4dab-b077-63e3f7c0fdbb", "sighting_of_ref": "indicator--020c00c9-75d5-48e6-adf6-400eaaaa6ac7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d9c5d0-d2aa-40e0-b774-28a2a0b9acf2", "sighting_of_ref": "indicator--992f78d8-040c-415e-b0dc-2b3f39e7ba92", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9ae23a-286c-46f5-8726-ec32b65febac", "sighting_of_ref": "indicator--8b720a82-5889-430c-bb72-55fa77b7f153", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc15666-d582-4383-9e77-dbad15c4e5a6", "sighting_of_ref": "indicator--0d0cbeb3-5bf2-4baa-a68c-623d11bb78f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee802ef5-9178-481c-8924-142be1a91144", "sighting_of_ref": "indicator--63556d21-36b3-41d5-8aff-553187adab2e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e6b7c78-9f72-46d8-9c69-278e769ccf19", "sighting_of_ref": "indicator--449f695d-ce7c-4129-95cb-8552cb31eafa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d089b93-6557-449d-96d4-cdec3095e033", "sighting_of_ref": "indicator--eb0e1627-8775-4534-8dfe-7aabc445167e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6873c2-846d-473f-98bb-d0a438c1db34", "sighting_of_ref": "indicator--48156e05-2c3e-4a7c-acf3-e0fa5959fde2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8cd9cc-e290-4704-90a8-682b98fcbbf2", "sighting_of_ref": "indicator--a4dcd4a8-0fb7-4c1b-821a-0aeb92a4930c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e44134-be65-4241-bc6b-c45c7b1b8449", "sighting_of_ref": "indicator--157679af-cdf3-4db9-9435-b5be3df67503", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15c125e-e029-4169-a524-644a2ef77bcd", "sighting_of_ref": "indicator--03b91720-b929-4b3e-8da3-07d70f084ded", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d209cac1-d1f7-42f2-aef8-81a30908e374", "sighting_of_ref": "indicator--de8b4694-1b95-4094-bc96-921f7f503455", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c6ed83-628a-427a-882e-c454cc78324a", "sighting_of_ref": "indicator--e5d31564-55e7-4d9c-ad3f-dbba2f342ed1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca265a1-85cd-4e43-b925-b54648e3ac23", "sighting_of_ref": "indicator--55b54c1c-b28b-4e05-81f4-1b6dac5f8c6e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcadc9b-0a0d-4a18-a1b2-65992b2b788a", "sighting_of_ref": "indicator--6866b66e-6f2b-48e9-b739-a5f33533e407", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34030af-a0aa-4bb8-8596-65f931b90f3a", "sighting_of_ref": "indicator--aa8728b7-05e8-471f-bcb8-8fb1cd409e00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3013024-1d73-48e4-8b9a-0026ce5da954", "sighting_of_ref": "indicator--c2235bbc-b667-4151-8caa-dec0f1e42b85", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2732683-a00d-48c3-a75a-32b6110b6c2f", "sighting_of_ref": "indicator--b90732bf-3763-4453-a9eb-9302acb22027", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3388b7-bff2-4138-9076-b65cd3eedd74", "sighting_of_ref": "indicator--c26d014d-87d1-4d6d-9f0a-2305b3651333", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc964be-507c-4e1b-b112-890d2c418b0a", "sighting_of_ref": "indicator--4041276a-4e40-476f-8a1a-00fc01272d23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bdf4a4-66dc-47d6-a541-3af478276880", "sighting_of_ref": "indicator--9c2fd7de-5800-427e-a979-2dcd9a0d7af3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6669e38-6207-4e73-89c1-319c8612843d", "sighting_of_ref": "indicator--e492e8fd-8a7a-4130-aff3-d05f812ad900", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--607e0f61-2835-4dc1-b8ce-5463b942c741", "sighting_of_ref": "indicator--7d179c7b-1579-4d23-aedc-7ec7503dc4f6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f20b9fc0-0101-428f-ab68-d33d36a4d138", "sighting_of_ref": "indicator--4e2d51d9-7368-447e-a527-8fde2cffaced", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a55341-e5a8-4529-a749-47d7ad1a2723", "sighting_of_ref": "indicator--acb84070-1477-4f7e-b003-fa3b9762f446", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480e1ee2-2d92-4a75-8e47-2f14457928fe", "sighting_of_ref": "indicator--80f370ee-de85-4920-b097-e7e265619de7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611a4855-10f6-4be9-9f53-2b3c829749c2", "sighting_of_ref": "indicator--36b6cf82-fcb3-4aad-b86d-43da8663d60a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79b0f934-1458-475f-a7d4-5d31586f8534", "sighting_of_ref": "indicator--d38266b8-6acc-44fb-a41f-42f0906c1b54", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d2b26a-5e47-46c8-91a5-4a750d808ef1", "sighting_of_ref": "indicator--7ba38c94-2c21-417a-9cbc-3a667fccf026", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960ba2c3-91ee-4241-8ea9-2633bb23dd25", "sighting_of_ref": "indicator--269b4fa7-ef6d-4d49-b603-4397c3323e60", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1259631d-a371-4f97-8a26-8881693c27a5", "sighting_of_ref": "indicator--8dbdf54d-5f6c-4c3c-a046-c4a3f0e0337f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e97e6b7b-9038-4dd7-9285-8a0d0d247443", "sighting_of_ref": "indicator--a66cc27a-c885-47e4-a15e-5190b8a7d5f6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2bf547-30d5-4984-8eac-7cc32ce95c53", "sighting_of_ref": "indicator--92a85c9b-e9e9-4140-ac7a-1828f0dc1308", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e787a83-b61a-4ede-ac30-6b77590367d9", "sighting_of_ref": "indicator--4d3ad9ab-7464-447e-9e1a-b9aa53e6bfa1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c637b2c3-8a7d-4512-885f-17f5a03a7540", "sighting_of_ref": "indicator--a9ae8527-9c01-40a6-b7cd-4ba9525f4635", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6dc172-1d91-4e80-aecc-f6c407ba6001", "sighting_of_ref": "indicator--5ac0344b-4300-4d45-9b5d-345c8f904b6a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ccb65c-881a-4576-aa98-dfb63fec236f", "sighting_of_ref": "indicator--242783ed-6ded-4358-a3c5-c6721164ea5d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15823b2-360b-4325-ac8f-e6bf92648500", "sighting_of_ref": "indicator--ee0cb1c1-183b-47b4-926d-fe65b8cb0e71", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de682f0a-eae9-4f76-9d30-7c209da04396", "sighting_of_ref": "indicator--355aa1a6-aa54-4b0d-9dde-707ea3f69e15", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea9540a9-4d18-4e35-a30b-c95b59fa543f", "sighting_of_ref": "indicator--6d68202f-05c5-4682-b08c-12116f315a58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e288730c-e354-447e-ab13-f2143bbd5bea", "sighting_of_ref": "indicator--8b43c926-ef01-401b-9f66-a5b53bbab489", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8298842a-76c4-4eb3-bbba-f749a953bf6f", "sighting_of_ref": "indicator--e56b358e-7558-48e1-8e7a-c4000fc59831", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92769183-07f2-4e87-90e0-39e8eeb9b905", "sighting_of_ref": "indicator--278675bd-1346-4e00-bd89-2fb8608ec4ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125e95df-a3bf-4e2e-a0a3-fe1ae515715e", "sighting_of_ref": "indicator--505eff41-84c2-4320-9f8c-4ab43f946ecc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fc326b-c38d-4038-b521-0598f66bb7d9", "sighting_of_ref": "indicator--2357b788-750d-4eae-837a-1b7ed85966e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365e568a-8593-48ab-ad39-ef238ac915e5", "sighting_of_ref": "indicator--053b9912-ba3b-4988-abd9-d9cb42db3bb3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6ec238-143c-4c8c-b767-a66968bb3c40", "sighting_of_ref": "indicator--c964a857-1dad-4d56-904d-5c3c012db291", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c633cce8-7c1f-49db-b994-835c41bc6f04", "sighting_of_ref": "indicator--73710ed5-e48a-4f43-9408-3730484eb683", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8745e1b0-8d76-49d0-b01e-3090ad2a3dea", "sighting_of_ref": "indicator--873467cb-1c9c-4629-9217-f1f08085284f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e42d0e-ca41-4d42-b9c7-7cad11c33384", "sighting_of_ref": "indicator--e9386664-98e9-40f1-9d8c-ba6a75e73228", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972b8cb5-ea1e-4211-abca-bca23232f130", "sighting_of_ref": "indicator--4cacbf35-f8e5-470c-a503-a79474b2d784", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41a8735-0584-473e-a8db-b3e00c6b2dfa", "sighting_of_ref": "indicator--e8fb7a3e-a926-4b5a-9795-75861907daa5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d38f00e-938f-417b-a815-c5153a780037", "sighting_of_ref": "indicator--cd67a3b5-e0b6-4131-a8bc-fa447a1f952d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d12e79f-6dfc-4bba-af14-60f9c06281f4", "sighting_of_ref": "indicator--559ce274-cbca-4082-ad87-3bb0df83a04e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6365b3-ddf1-4db2-b7f7-dab50dda3efb", "sighting_of_ref": "indicator--ad2410f7-e571-4f5d-a255-26385b9f85c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101a4b2b-879d-4b2e-904a-595d13b8e4f9", "sighting_of_ref": "indicator--335eccb9-df70-46e2-aad7-37baf5890d56", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a722adf5-ba9f-4005-9556-ca7f4872e6d9", "sighting_of_ref": "indicator--ebd07820-14ad-4394-94ae-d908f1af601b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a597b0c-e84f-4d11-aaa3-e56f512eadcb", "sighting_of_ref": "indicator--36597bcc-4a21-4607-95ff-8dfc929e13c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0447ef35-f4e1-48aa-b168-5ee9e5437d6a", "sighting_of_ref": "indicator--37becb7c-2042-423a-8a0e-3e616856695e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7097652-23c8-4b83-b124-a3dea4906c85", "sighting_of_ref": "indicator--48bdc83a-1930-4bf4-a6db-6fa4a94ae491", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e5815a-9215-4874-b71a-6407f8c026c3", "sighting_of_ref": "indicator--d75d37a2-68ca-4b9d-91eb-ebc52d75e48a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d7d979-9677-48cf-8477-83ff4d647e6e", "sighting_of_ref": "indicator--ec92f5cd-91de-4b9b-97e2-28ab0c3deb1d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a340151a-1aac-4961-bf0e-7198fe0a4561", "sighting_of_ref": "indicator--53d08175-e1b6-400a-af5e-3896d1382400", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c38709-b34f-4501-92db-a41e59868333", "sighting_of_ref": "indicator--a9b9135d-19c7-42e3-a286-bd08344b6646", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255290c5-fa92-42c1-8c9c-f8e4b207a597", "sighting_of_ref": "indicator--7c6e2bf0-d009-4cb5-9cb4-068cf221f025", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655cc85a-d7f8-40bd-8f36-f34bdbccd6a7", "sighting_of_ref": "indicator--dad459b0-3d81-4563-a43e-30d4a6ce6842", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf9845d-e1de-458c-af03-493fda3ef0ba", "sighting_of_ref": "indicator--4ab4f3af-01e6-4c55-9c9c-27b6ecffd09f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8b5734-5522-431f-8843-45318f3a8629", "sighting_of_ref": "indicator--bbd8cdae-43aa-4213-8850-73377988a035", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d618d5-e1b0-473a-91ba-4dea23037e5a", "sighting_of_ref": "indicator--9153d180-4a93-4c4c-8572-e4ab25f83ea3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c511792-a06e-4a11-a9f4-8f7a2a18856d", "sighting_of_ref": "indicator--98423e83-08a5-4780-8230-e3d8a617eaf4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2296b0f5-36e6-412b-bed2-6d8ea22bd875", "sighting_of_ref": "indicator--b39acaae-d40a-43be-83b3-ed6d2587f22b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f213887-5413-4b95-aaa0-3038510c432a", "sighting_of_ref": "indicator--9bcd1ef6-d4a4-41c1-a4d2-f78e1d646b4f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c34f1c49-eccc-4c8f-b423-7b73c29d3b39", "sighting_of_ref": "indicator--bcbf6be8-67bf-4745-8836-10358a8973f6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368b8836-4444-4df2-b825-ce797adf5e45", "sighting_of_ref": "indicator--cf8c9df6-b558-4921-9bf9-a8096bc64bde", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a91902f-1316-4fbc-bbd4-2214650858a3", "sighting_of_ref": "indicator--e3a07f9b-2060-4116-b40e-ce994359eeaf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa426086-baa2-4705-96f5-d755efceecde", "sighting_of_ref": "indicator--5512b63e-5958-4db8-a6b6-67e675fd4f5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e5c9fa7-a605-4dc1-9dcf-4df89dec5a2d", "sighting_of_ref": "indicator--2a9365e8-00f9-4167-a21d-d5d79601e772", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1547aa4d-d46f-430b-9538-0adca21ca4e9", "sighting_of_ref": "indicator--7433d44b-321f-4ecb-a7cf-3ee71d56fda9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857bfd53-c370-48f3-8a6f-6be02dd5e766", "sighting_of_ref": "indicator--a4e1d8a8-ba37-4355-a8b6-d16be6f427d1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f1bacc-0d66-43c1-8fec-0f72d40525f2", "sighting_of_ref": "indicator--e61fff6b-523f-44c1-9383-ffba7701b8e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d534fe6b-c1e0-4023-8ad8-81b06af91ff2", "sighting_of_ref": "indicator--4159c9bc-6dd0-4f63-90e8-da1d73b212f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1284f7-acbd-4e07-8ea6-e3d3ece3b305", "sighting_of_ref": "indicator--c8a5f736-06b3-4479-a356-fd6bcb795590", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0a4e40-d3a2-4911-a3f7-71b2d1540a50", "sighting_of_ref": "indicator--a1354833-4bc1-4f8d-a8c0-440b076d31ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c98033f-c4ce-488f-b3e2-02a4f75e907a", "sighting_of_ref": "indicator--95c20433-22c8-477e-8d64-a49d87601919", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a891d0c-93d6-4d97-b3ad-2d3072d67abc", "sighting_of_ref": "indicator--335326fa-7463-44d8-9ee8-c234b0265ef7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2769d2b9-1093-4c0c-af78-723fd8eda819", "sighting_of_ref": "indicator--7cff164c-91df-478b-8bd4-1788501fa2fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f17196b-0b4c-45a8-8f0b-cb8457c41eb1", "sighting_of_ref": "indicator--d53edb06-f9ff-4db9-a497-6fb032a6d6b1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376417ef-73e5-4140-a796-07298fe968af", "sighting_of_ref": "indicator--2e518d08-2e0a-4ddc-b9b8-76ae1549feca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91b64e7-553a-4116-ade4-1927cc0706aa", "sighting_of_ref": "indicator--5057f939-1aa9-47ec-876a-861b4bdd8ff1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e6dcdc-79a8-4fa9-84cf-e44c3b5e1218", "sighting_of_ref": "indicator--b78bd9b6-4722-4525-b701-84e9610995a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4009a521-b8c5-4786-be0a-f00efbcbd6dd", "sighting_of_ref": "indicator--18bb7d4e-9a5b-4fd4-b9d3-7e052903bd79", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e67ac46-c11f-4ac6-b74b-fc275006d932", "sighting_of_ref": "indicator--73c6d99b-49c5-4e40-820e-a3b239ed290a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65ec549-603e-4c0e-8624-c459e37cf192", "sighting_of_ref": "indicator--78888802-4a6e-4609-a534-8583f7e674b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067475a3-2ceb-4ade-838a-8abe0d5dd2cc", "sighting_of_ref": "indicator--11965610-ea1a-4adc-8c37-9b07e315f0d4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2437f8b-874a-4dd1-908f-b86452754c57", "sighting_of_ref": "indicator--c5847b8f-fbff-43c9-8c22-01b1ed1c60ec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74c3a4de-6523-4349-b316-c481eee2d5ed", "sighting_of_ref": "indicator--b64b1346-c454-4286-9dd9-a352ca81120e", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376b9f78-a433-4492-b9c0-5a0a45fc0537", "sighting_of_ref": "indicator--b64b1346-c454-4286-9dd9-a352ca81120e", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1227703e-57d6-4eaf-aa54-81152f2bd5cf", "sighting_of_ref": "indicator--b64b1346-c454-4286-9dd9-a352ca81120e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a831c997-7718-4a97-a547-5f360fb0375c", "sighting_of_ref": "indicator--4b8f799b-080e-4437-84f6-c77f501c37c1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8818bc-783c-4fc4-a13f-0a1d8c15e396", "sighting_of_ref": "indicator--9bcc070c-3242-4100-a98f-aec2743cced2", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7930688f-747c-4836-89cb-63588ff24cce", "sighting_of_ref": "indicator--59f0365f-7aeb-44cc-959f-e11fa7cf2397", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60d24a8-cc01-4727-966f-fa97541d740a", "sighting_of_ref": "indicator--2a4c14ff-d5d6-4bbe-9041-148ea61f67ee", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea59d64f-b23b-471b-a3a8-0a7578696e5e", "sighting_of_ref": "indicator--6c37b809-746a-4357-9943-7f6a067ac7dd", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf060838-33d7-4138-938c-5238439a5386", "sighting_of_ref": "indicator--ae5718d2-fe62-492b-a224-0124410038da", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54aac669-5102-42ef-92c5-e1c7663ce532", "sighting_of_ref": "indicator--c6f8431d-4753-4ac8-ae87-3570819a06bb", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea43a5f-d955-4552-82fe-6e5ec09b6752", "sighting_of_ref": "indicator--03e0c2d3-58cc-4d6e-9cc0-9ca19d06016e", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bd5dcd-0557-4177-9793-fc56ffd56b3d", "sighting_of_ref": "indicator--feaf03fe-1ad6-4150-88f3-137bcc08ad1e", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f4658b-2c6f-4974-9c28-3f8bcfde7068", "sighting_of_ref": "indicator--a49294b0-35cb-4d8c-8299-bca446cd0ad2", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbed2a80-0ac4-4e55-8a23-01e68646605e", "sighting_of_ref": "indicator--94117968-92f5-422a-9973-bcddf296c1f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeb2097-916a-478f-be80-71aead10f51f", "sighting_of_ref": "indicator--42d25b59-0226-45bf-a9da-38d03a8c75d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd58b5f5-dfea-48ed-a71f-9b29811ea73f", "sighting_of_ref": "indicator--14419577-93f1-49f8-b333-0887633b15cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9bdd23-cc53-44e0-a967-2b3c75adabc6", "sighting_of_ref": "indicator--a1a731d1-a193-4229-b48a-39d7232cbee9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b8878e-e6ad-4a1c-b6d1-0b3f19c918e0", "sighting_of_ref": "indicator--231f3857-e7da-45ea-b393-f6624ed0c725", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b64a14-8b5d-4a15-9b3a-efd2a7aec54f", "sighting_of_ref": "indicator--889702f0-458f-4401-a4d4-36fbe81589bc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0db073b-2a17-49b0-81d4-f6fc99d583dc", "sighting_of_ref": "indicator--9273f005-c94f-42dd-8d9a-a0ff0acc9d02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bda0fd-b6ec-423a-a244-549668228274", "sighting_of_ref": "indicator--0bf8da75-5c17-4ae4-96c2-b270ba853496", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37998e0c-33ba-4afa-9a7b-f16a9fcbeefc", "sighting_of_ref": "indicator--af14efb5-f16d-4cde-b229-9d9a1630d77d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde33e14-0914-4756-93a6-e817db1690b5", "sighting_of_ref": "indicator--2b3b40eb-1939-496b-bbe1-c9536bc8e45c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfa24a2-bbc3-4f5b-96e6-3e4f0ad9e0b1", "sighting_of_ref": "indicator--59fdff14-77d4-48c5-acde-f8c2bd68f8f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dee83eb-6033-4a21-99c8-264b4f8935c5", "sighting_of_ref": "indicator--de893ec2-4a43-4602-9411-596c0210efda", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2e9538-6cf7-40fd-be44-3a9ac0f85743", "sighting_of_ref": "indicator--f09d3c62-8e8e-4fac-acc9-aadde0d241b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ff9c5c-dc0b-4d5e-a517-34ca10b334b0", "sighting_of_ref": "indicator--5a8498c8-2f7d-43f9-9294-3d00f163f5f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce14ff44-b2fb-4da2-a0bc-262ce03f2de2", "sighting_of_ref": "indicator--76054572-20e6-48ca-b44a-82a065c3d05d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce42ecea-10d0-42b7-a803-a475c45cbe2e", "sighting_of_ref": "indicator--b9b84de0-ffff-4290-97d9-f88eb4d2a155", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2057694e-39ae-4507-954e-15ef37e661b3", "sighting_of_ref": "indicator--9ddbfaf8-ea7f-42cc-8a7e-5b7a93575fea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4d376a0-d43d-4472-8204-072cbc4a9e8b", "sighting_of_ref": "indicator--7e7e2486-8aa6-449e-b2b8-a3bb0b4e0e10", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a10d6c-348b-43f4-9433-a039f0430f4c", "sighting_of_ref": "indicator--e1db4ad4-46ae-42c0-8a94-760bcc0d0f22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b08837-f712-43c2-9797-fcffdccbe066", "sighting_of_ref": "indicator--4c6af098-722a-44e6-9a9a-7261bfe1d4d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c41c531-bd7a-4f0c-b1e3-2c72bcdf1690", "sighting_of_ref": "indicator--041c3b92-27a5-410d-addb-2029f28b2e59", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb8e75c-0c29-429b-b02d-40ac67878976", "sighting_of_ref": "indicator--2876fcde-6ba9-464c-90b3-fc00216131ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--943773b3-837e-4859-987c-3a9fc8840659", "sighting_of_ref": "indicator--ffdc3c8e-ed9d-4380-bf17-804a24342ea1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbc1766-eb4b-47a1-8a3f-6c74798ce604", "sighting_of_ref": "indicator--80b77ebd-fac9-4491-9d23-1d18dd1babb6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897d9284-941d-4151-bebf-1d795b1527ee", "sighting_of_ref": "indicator--fa51381d-7cbf-4a96-9978-c180045d1299", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e2429b3-9e2b-4cd4-bf2b-a8f62189eeda", "sighting_of_ref": "indicator--a5a8ce7f-e7b9-46ae-9491-0a7a2687bfb8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f93ed1-01cb-4256-9b11-ea03befaa532", "sighting_of_ref": "indicator--f45c7dc3-73df-4209-a65b-326ce0fc13f9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13441d1e-e6da-4e5c-9f91-c379e77f9af2", "sighting_of_ref": "indicator--05a41feb-69bd-433f-ac65-bd45029fb53d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61a0c9a-079a-44a5-b829-840c451ffc85", "sighting_of_ref": "indicator--18c5708a-dbe3-48a8-9fe6-e34537327614", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d638fd2-a834-47c1-ac9a-f82704efa7c1", "sighting_of_ref": "indicator--c38ee87b-3a6f-4d01-a750-cea2d00130e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb71635-f746-4a97-aa7f-83405f9a1242", "sighting_of_ref": "indicator--70a3b6e9-368a-44ab-84d6-4cb9c3d08992", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584f0f93-5eb1-45da-b260-2e19a95d96ab", "sighting_of_ref": "indicator--2a928cfd-257c-4c57-b8d2-0d8584cd53cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309192b3-6224-4faa-b5e3-0002334a346d", "sighting_of_ref": "indicator--f73e13c2-676b-4296-a1d4-6fad566e78dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c53a2a0-8e56-476f-985a-0dffd5b3ce2c", "sighting_of_ref": "indicator--38b1b431-21ec-4930-9288-e49c00ab9fcd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce55ea2-6b7b-4802-ab1f-b818ed974985", "sighting_of_ref": "indicator--a75ec44a-6e4d-4f96-9909-535b30651fd7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186c8664-da4a-4acc-927e-f1f0e4f41cef", "sighting_of_ref": "indicator--45626fbd-39b5-4f72-b0c0-464aa64d0f12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599b87db-e19f-40e4-aa10-9933b6b35baa", "sighting_of_ref": "indicator--16c92f9f-3df2-4ffb-b25f-7917276200fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241eea78-ba3c-41b4-8e53-43fbedb2c34e", "sighting_of_ref": "indicator--1596d7d8-e6f3-4030-90c4-cf7ec5e4a4ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c6429f-d810-4a09-9e73-f70fb241bc89", "sighting_of_ref": "indicator--f7469cd3-0e84-4ed3-89b2-b3456d3528b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5068816c-d5bf-4ec9-a890-d4f20a10d40d", "sighting_of_ref": "indicator--44049e8a-0a88-42f5-b2b6-61e9087fa70d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3efe81d-cbcb-4cfd-83be-ac965e36e213", "sighting_of_ref": "indicator--515de7ef-3589-416f-b2bb-555d36e7deb6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d82675-a845-4b3d-919a-a0691392e679", "sighting_of_ref": "indicator--6f73eb69-06a4-4cec-8830-2b3818aaebb5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3985f7-ecc5-4368-94e6-e6fb3f25fcd0", "sighting_of_ref": "indicator--44884dfb-712e-4149-8bf2-a82fba2c4ecd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59dd82c7-fee5-4ce2-a478-ea8ce3a2261c", "sighting_of_ref": "indicator--9b4fcef3-2dbd-4e09-b1ee-7d183f9c68a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebe51b7-394f-442e-a05c-6901751bdcf7", "sighting_of_ref": "indicator--428b68f6-398f-4ee2-b6d4-8f2de951e5af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad0bbb7-5c2b-41c1-afb2-4c26f5a639d0", "sighting_of_ref": "indicator--e1908e8c-2412-48bc-8b7d-9b280c207c07", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935fa364-943e-496a-a58f-075223001614", "sighting_of_ref": "indicator--a9fda3e3-49b8-4d9d-924f-a06d0fb837b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3b97bd-321a-4bf1-9caf-adaaaa5d3323", "sighting_of_ref": "indicator--c49ed072-3322-490a-b630-e5e76a7d83ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5c18c1-8bfa-4157-9b55-6d0cb045a487", "sighting_of_ref": "indicator--89b3536a-f708-48a6-88a4-f50cbef4345f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e4e396-eef9-4a47-9933-1f55008a0b21", "sighting_of_ref": "indicator--851cb1f2-9720-41a5-a2ed-0c66532520ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3128abb7-0aa2-4da4-89a3-00c570a7c682", "sighting_of_ref": "indicator--3cfd778e-c390-4493-9beb-fb6ce2972035", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f918e8-eceb-49e8-8c75-d0958fa86940", "sighting_of_ref": "indicator--1ef6fd66-eeb6-4d58-9dd5-326bef19a46c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67711fd-2061-48b1-be79-e18ab2967c27", "sighting_of_ref": "indicator--4db19c15-9767-47b0-b94c-f1ac85d014d8", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2de21a-ec2a-44c6-9530-764fb6cc3559", "sighting_of_ref": "indicator--c6fd872f-55c4-4de6-9dc9-44d427872fb2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce6d55e-7054-4137-a5da-b2496f7bf589", "sighting_of_ref": "indicator--d9828b52-4afa-477d-bb95-cd8b008e1417", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69da9aa0-d97c-4241-9369-8d24979b6b3e", "sighting_of_ref": "indicator--7da724a6-f40a-405a-8200-3c5545064c7d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c91647e-8d39-4ead-b95d-0f3b702c79ed", "sighting_of_ref": "indicator--fbc78c38-45e8-436a-9415-a99bcdd43d8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aed5a4c-a983-44a3-9c72-0e0f595ab496", "sighting_of_ref": "indicator--ca2c1e4f-35d4-47a2-b1bb-1dcc0ae2a992", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2474097-e0fa-48d7-9b91-1bc13f98fa7c", "sighting_of_ref": "indicator--0d9b19f4-37ee-4c57-bec7-1dd7d2198560", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1f5b62-72b4-4a73-b24e-d26209d6bc64", "sighting_of_ref": "indicator--2d5c312a-fb05-41cc-a6c4-82d8fbf66fab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ddf6f3-b966-4bdf-8ba1-f0ac46a95ffd", "sighting_of_ref": "indicator--e2329ae5-7ed9-4475-b905-a73ae4d2f275", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ac8f45-2a21-4b71-b081-f4da16a16494", "sighting_of_ref": "indicator--94a1e2cd-d662-4d7a-8e17-110ee055cbb8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96520ea2-26c4-4a91-9eb7-a904313a4f97", "sighting_of_ref": "indicator--1f2ed863-54cf-4721-add3-6cbe1e33afaa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c80def-2100-443c-82dd-743505dcecec", "sighting_of_ref": "indicator--ec95c235-1662-4327-90ea-eccd1c0fc6d4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d6dd0d-5add-470c-8e26-2574f30d0e31", "sighting_of_ref": "indicator--66670680-57d3-4d3d-834c-8eee79cd81d2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f7a582-5be4-494b-b688-2c3768d450e2", "sighting_of_ref": "indicator--a0647f7f-59e6-4882-81f4-610c9efe504d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12901846-707c-405c-8be8-da7b4bb70506", "sighting_of_ref": "indicator--a72350ef-2743-4a00-ba2b-47239071f5e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb8e79b-e393-4e45-b0f9-539ea2ef0b0b", "sighting_of_ref": "indicator--d7feb252-168e-48f6-92af-7bc271c14270", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef6f5b0-4c08-48f5-83b2-9f400d912f9a", "sighting_of_ref": "indicator--5fa92e9e-9b66-44fc-a5cc-44db7aabf394", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f372aa4f-90aa-4fd6-9128-891b60e96dd3", "sighting_of_ref": "indicator--d665061b-702a-4dae-90dd-352bac760af1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c16748-035b-4162-97bc-0cb420b45b1b", "sighting_of_ref": "indicator--52f48c88-419f-4d9e-b67f-3f42fd20dbed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01babf78-fe66-42aa-ac89-1e7f17c4ddc4", "sighting_of_ref": "indicator--a54da8a3-9a79-466f-a5d3-f8312d35360d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ec632a-3ab6-484a-acf9-03dc3b2e62cd", "sighting_of_ref": "indicator--5d1f8126-b77f-44b8-aa00-148ba5498784", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14cf000-172f-4a81-b78c-15654e8e115d", "sighting_of_ref": "indicator--62b039fa-e66e-4eba-976a-539a8f1acf7e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bf8f2b-f5c5-4cfe-9370-0d88da24279d", "sighting_of_ref": "indicator--1f400566-9bfd-4f9f-9c67-13169c3edf9d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d851ef3f-7861-4433-9238-d98f254bf6bc", "sighting_of_ref": "indicator--1930028d-5cda-458a-8566-46755e98c345", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916a1f3c-b56e-47d4-afc0-aaef8d0b9f37", "sighting_of_ref": "indicator--fd9fa83b-7d1e-493a-a573-560c9ad258a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74835a7-15a0-427b-b095-0477d6cf7b96", "sighting_of_ref": "indicator--402b1dc4-09c7-4568-bafa-d3f205e98b9a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c49105-4df8-4556-8d50-436ef1eb49b7", "sighting_of_ref": "indicator--a88944f5-ab7f-4707-84ce-66fc0aa02b47", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42835a5-c3ab-4a7f-b5b1-ff6e886c7fa8", "sighting_of_ref": "indicator--11fb7173-117d-49fc-9284-43aa5f6d18e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5910d499-5147-4210-85cf-3bbc7103fbf5", "sighting_of_ref": "indicator--59f144b4-e5a4-4a5a-b2d2-0105ae574ae6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854cf0b9-4bfa-4cc6-a56c-90d639519e5a", "sighting_of_ref": "indicator--8ab3a480-7636-45f5-a38a-cdfc20b93ed1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0126a9-e285-4a19-bb8d-83fb2b8f8bfe", "sighting_of_ref": "indicator--d7edf046-7965-4780-bf02-a0185706d979", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0250c3-3558-4f7c-97d0-a95b128bfbca", "sighting_of_ref": "indicator--5ecf7c55-9fa1-4b67-9e23-5d12981d9079", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e96aaa4-b343-41c2-8610-2fed74823a00", "sighting_of_ref": "indicator--f6bfe30c-968c-4455-9461-f3704a73758d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acada7cc-0457-4e2d-bd23-7e36743d0d9f", "sighting_of_ref": "indicator--833ef0c7-44a3-4d5b-a0a3-51d30c5a3e76", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9997ce0-b689-47d1-9e54-6df053a7023e", "sighting_of_ref": "indicator--7623429a-1c03-46dd-aca7-5af66009011e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e464118d-de11-40cf-bcf1-5c4201d73687", "sighting_of_ref": "indicator--2c07ef4d-0498-4188-b90d-cbb4bc921811", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f75f8ac8-131f-406f-bad5-91dc6348000a", "sighting_of_ref": "indicator--1f3a3242-8b08-442b-8656-fe14d6193e48", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a77b48-8a6f-4579-9757-a7ecd88a56e0", "sighting_of_ref": "indicator--081bbc0d-4d59-4a29-b0e9-ec1ff7485862", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85a7c0d-5a6b-4784-b5a8-357f5efd3ee8", "sighting_of_ref": "indicator--25ff3ef9-dd0f-4aec-9c05-066da04ffdeb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819a2444-4bde-4403-a55d-9b4335619ebd", "sighting_of_ref": "indicator--077b098f-ed17-4c90-a7f2-016ba22d8c47", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b8dbaa-ea4b-4444-ad65-0f6a7c7909d9", "sighting_of_ref": "indicator--997ab247-52f3-4a8f-8b07-f99e705146d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10645480-a799-4ed0-b19a-a125e08de772", "sighting_of_ref": "indicator--47d096c6-7847-4716-bc94-ef817df9ccd7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a84aef-8523-46b2-b215-751430478f77", "sighting_of_ref": "indicator--4ca69e74-01e4-4dc7-b7bd-b545da63ddeb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17550d46-f095-4fc9-94ef-a9143832f1c1", "sighting_of_ref": "indicator--ffcbd3f5-9513-42ec-aaa0-37ff3eebab0a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575b4a3f-41a8-480d-b597-97d6bb53cb83", "sighting_of_ref": "indicator--aa55de56-cc3c-40a8-9ca7-a1edda81279a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef0b32c-ad6e-4a45-972f-70823b6bcde1", "sighting_of_ref": "indicator--46ca5805-b551-4d42-b1a4-d0d8107ac19b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16248ab-424a-4a8d-9068-1cd2d2ceba0d", "sighting_of_ref": "indicator--6e0354a1-2393-4a3e-8d1f-3ab224a839e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5efa99-6069-4c68-941d-c19f8ddeff5f", "sighting_of_ref": "indicator--fd64a54b-fe0d-4fa4-831a-67d7ef82bc60", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1917088-cd8a-4885-b1af-c2f7c8256b96", "sighting_of_ref": "indicator--84517240-bf00-4fcf-906a-73672259d8ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91471dee-55a9-4bf7-b3a2-6799198e74ae", "sighting_of_ref": "indicator--9938085d-02d8-470f-a5ff-00b3d71ed01b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da591599-d83c-4d2f-92bb-0eb4306c19b0", "sighting_of_ref": "indicator--e5c4da8e-61fa-42c7-9a8b-0b8ecf81fe16", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bc0a445-39ed-407a-82cd-29c9eb91101e", "sighting_of_ref": "indicator--90fef33c-8064-4700-8088-7fee2e94dd7e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccba804-77c7-43c8-bf6a-af0c2704dccd", "sighting_of_ref": "indicator--d797fae6-3274-4829-ba5c-1d5bae3587f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd573318-dcdc-42df-bf5f-b0d394a5c9a3", "sighting_of_ref": "indicator--bdbe82ee-0246-451d-b540-bd67c9e7f21c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d60f185-3c20-4e6c-8893-7a02ad7856f8", "sighting_of_ref": "indicator--0311b832-5038-4902-8032-08341658bc58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d776c407-5a02-4d08-9b4e-c17becc1d9ce", "sighting_of_ref": "indicator--18820b08-89b5-40af-ad70-86e59ed529df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91286f2a-5854-4cae-9d5e-9d02be041c0a", "sighting_of_ref": "indicator--e7434798-06ed-4aad-b0c6-ffa3d7eaee11", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64febbfc-6c93-4aa6-8c55-d3b7078bcfe4", "sighting_of_ref": "indicator--7c21d8bb-363a-4a75-8b68-01a4fdf2dd4c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2affe0c5-ce65-44fa-8576-25b60ea5036f", "sighting_of_ref": "indicator--9ac6f124-48c3-4c15-9da7-3fa86401e216", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d13fa91-1ad8-43fc-8c23-2c550c6be88a", "sighting_of_ref": "indicator--869f569c-73d2-4bf2-b3be-e8a187f6e2e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bca334-19f5-44fe-9d3b-dd6cb8762349", "sighting_of_ref": "indicator--2db83112-1f38-4fbd-ba77-09140058dc85", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8651d9c-cd9e-4a0b-a98b-19b71a13d086", "sighting_of_ref": "indicator--36d6589b-3029-49b2-9e10-489631c0ce46", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df12c20-f5da-45fc-8f28-acea04b93d19", "sighting_of_ref": "indicator--09746390-cd2d-4abf-8f25-b08e351151ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137ea803-e5bc-4529-8b2f-71240c29619b", "sighting_of_ref": "indicator--92694994-8e1e-4dcb-a0c7-3a91d39edaf7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9cbba0-5994-476b-a8d0-ecba36f8e9a5", "sighting_of_ref": "indicator--be7df074-303e-4d4a-83ed-f51802ab3365", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95deaf68-1e32-4d5a-9ce6-f8821ab471e3", "sighting_of_ref": "indicator--83974b61-a85d-4576-b151-8a84e6f7400c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ed77a0-ab8e-4279-b5fe-a33bbc04b64a", "sighting_of_ref": "indicator--c3d85f77-ac33-400d-aa48-e467bac6d426", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e13f4c6-1393-4c61-bc83-b48dd865de2e", "sighting_of_ref": "indicator--d32db64a-c3a5-4a85-879a-74e7882bc843", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41209da-aa7c-483d-8d95-aa2b0952f722", "sighting_of_ref": "indicator--a15879b9-7f4e-40ec-9134-cd45e6529556", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c82f72-c2b9-432a-b66f-868a66194ea0", "sighting_of_ref": "indicator--b95beac5-3654-4d1a-9ba8-f5dd3c0fa5ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8679ae74-9932-4448-86d0-40abded76a26", "sighting_of_ref": "indicator--ff4f55bc-3026-4b7f-8725-472b45edeb8a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b3d7d5-8e78-4ba5-816a-987464ba8e5b", "sighting_of_ref": "indicator--72edf3b4-7944-43b1-9e7d-520d3613d616", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1d2fe0-2cca-4818-bc0e-d3777c2f35ec", "sighting_of_ref": "indicator--7351ec67-78c1-4a27-ba55-d7a6097fe36e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5441474e-9bc7-4cb2-9da4-6bf69fbd7e55", "sighting_of_ref": "indicator--b4f7d56e-5405-459a-a1d1-3caa4346427d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cba94d0-f3cc-4db7-b9b3-a11a9aec0fe1", "sighting_of_ref": "indicator--9908bf92-85f6-4cb9-b205-299f8482311e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0345f9-e221-48d2-9e27-71e600251b8b", "sighting_of_ref": "indicator--78dfae7c-64ae-471e-9ef8-75f5d2732b68", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d78c1f-e1d1-4664-acd9-7412abaaeb77", "sighting_of_ref": "indicator--b400feb7-2f46-408b-b698-dfba46acaada", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bbb441-0ddb-46f8-8c8c-7122b147e236", "sighting_of_ref": "indicator--6148db8b-d1c2-4ecd-8a3c-38d99d562444", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d0789c-d689-473b-8988-2819816f72e9", "sighting_of_ref": "indicator--22619a4f-aa5a-4ce2-9476-c4bfdb32614a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03189a3a-0c19-4b1e-a759-08f3d1383b7f", "sighting_of_ref": "indicator--f269ca52-8d13-4d1a-9665-ff287d90a9df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b12a7c-2405-4b95-9925-ddbad3c1ff2d", "sighting_of_ref": "indicator--a28df1e3-594a-4036-81ae-986d2bbd6a22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b6f78b-30d6-4801-88ca-3ed20614ee4d", "sighting_of_ref": "indicator--72b81c60-533b-4d3a-9983-7c48b290df09", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6ea331-a699-4c0e-800f-95bcf170e9b6", "sighting_of_ref": "indicator--196973f7-1151-481e-a3ba-aeab0658c3b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422791c9-6a29-4e16-9b7f-969574477e73", "sighting_of_ref": "indicator--473a63f5-cd00-4f1e-9277-d6cba1ccf4bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a358e740-3c73-4345-84a5-e3d49e70eb94", "sighting_of_ref": "indicator--45fd253e-ceed-492a-8f00-ed0e09d121e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3e303d2-b396-44ee-aa72-e2cf44070407", "sighting_of_ref": "indicator--efd282db-3899-4cf5-93a0-f3eed56443ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cc02f7-0eed-4000-9bef-03309e19ff8b", "sighting_of_ref": "indicator--b7b0c49e-abb8-4f6b-979d-9144833e4371", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73d7ed2-2086-4b58-9520-b0c6fa6b2c1e", "sighting_of_ref": "indicator--994d2274-b19b-4a66-b12d-a3e54a2a2945", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fceef9e-903a-487b-af7a-f7224581cd97", "sighting_of_ref": "indicator--2e7e83ab-b5d0-4e85-8f01-e59e5342c8b1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c026a4c-ae2e-4828-a6f3-fba14de63958", "sighting_of_ref": "indicator--b213079b-e2fc-42ba-94f5-62a252784049", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5feaeee-311f-4acd-9fea-95a6a2c742e2", "sighting_of_ref": "indicator--b64cbff0-8f73-453e-822e-1f43fa9da527", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcdf6559-61cd-4b90-803f-86ae61b91d96", "sighting_of_ref": "indicator--a3b84664-e717-4f9c-8d9e-d549d7304817", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98dd1a07-8de6-403d-baad-fc7637603a49", "sighting_of_ref": "indicator--4264184e-51b4-46d1-9afd-f0330c50f4cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d92ed9-f206-4c95-9fa4-05231093e700", "sighting_of_ref": "indicator--42a4050d-4f78-4874-8d16-b29965120aee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e7290c-3cab-483c-bd13-e2bc23a682be", "sighting_of_ref": "indicator--16b964d6-ff57-4d41-9b24-a64585eb2c24", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ca8ba8-f844-4cdf-9032-bfdb1d9de8ca", "sighting_of_ref": "indicator--98e09fe0-7f2b-4867-88c1-4dfed57ae9eb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226501bf-77f6-408a-9ccb-3372d3696db1", "sighting_of_ref": "indicator--d42a9db0-926a-488b-b5ef-1d6fd0e58e9d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2486e772-a80e-42d3-baad-c7a15abc9e5a", "sighting_of_ref": "indicator--f0815564-37c9-48c3-8633-47e909016e83", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403c899f-4fbc-4abe-893f-af71f26a0367", "sighting_of_ref": "indicator--87bea5d6-d049-4169-8ccd-ebe6e7a1d615", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31752b46-66f0-408e-9a0f-67d3be7f9b11", "sighting_of_ref": "indicator--69e16342-8833-4400-9ab9-b838a95bab7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bd89cf-8a4e-4482-a1ba-fbe0cc92a0cd", "sighting_of_ref": "indicator--03af41fc-0d73-4cdc-8ff2-73f68b311a37", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f9b425-d090-4462-ac29-ba6f831d599c", "sighting_of_ref": "indicator--515df93e-8dbe-44d8-9792-2bf923961c8d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff4ee70-948e-4109-a59a-25d37bd981c5", "sighting_of_ref": "indicator--05a50371-d07c-4fcb-848c-306a78d09c23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf62181-9b49-48ce-9fcd-40f4e3798b55", "sighting_of_ref": "indicator--04019033-1c52-4aa7-8f81-f4ed96d206bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e88537b1-2d16-42b5-8669-ccf8daf46884", "sighting_of_ref": "indicator--27000567-55d0-42f6-870b-f7c35d5bf6bb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668a2e29-1318-49e1-89bc-c0aabdcf375c", "sighting_of_ref": "indicator--47d8d59a-70db-4974-aeab-0c894d8707e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4175ea50-43cb-4c67-a235-57337b35aeb6", "sighting_of_ref": "indicator--3201475b-9f77-4991-a99a-c37decf62745", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c386b8-34a0-4663-9377-6471dedac8e5", "sighting_of_ref": "indicator--ac6b494a-5561-4a1b-a88d-168b61168714", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77638594-e130-423d-92e4-3c038be7e061", "sighting_of_ref": "indicator--ca06911d-cf06-4a90-a72b-6d122f587aef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7627fab5-da78-45d6-a1ef-948b85e26b8a", "sighting_of_ref": "indicator--4681e2ee-7b7c-47af-bbd4-95fe4b676233", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a2fa3e-dcc6-4966-843b-63b12626964b", "sighting_of_ref": "indicator--df8d5b12-15ee-43f3-a01e-602369429172", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430609c1-aa27-4dcb-9736-8434bfd0654a", "sighting_of_ref": "indicator--4058f4c8-27fa-4b12-be1e-ef2313b5e014", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9529f07-e7f9-439f-80ba-fd9095505fe5", "sighting_of_ref": "indicator--33c89744-4f1e-4fe8-80fa-e858714b513f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f19b37-4c61-4a63-981c-155f28411f11", "sighting_of_ref": "indicator--b6f99f7a-889f-4111-9086-6f4b7ef440e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1debc237-5e83-4048-9ae9-a88a623ecfe7", "sighting_of_ref": "indicator--d385a3f4-4baf-4a81-998d-67fea825cfe3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbd5a17-9c73-4685-b913-9983ed71a3df", "sighting_of_ref": "indicator--a3340978-81bc-4dbc-a53d-b47a51f4ae81", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b00044-1ff8-48a6-8862-a7d5c453a4a4", "sighting_of_ref": "indicator--ab2f0149-4846-4efc-b667-ce6844e31a31", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b86270c-03bb-4127-b8b1-12ca0b1305a6", "sighting_of_ref": "indicator--1b08fa60-7957-4ff4-a830-5288531f6b3e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d54a9ab-d169-4af5-b232-8f9995cc794b", "sighting_of_ref": "indicator--c6fd6a61-8dd7-43ae-9731-3564e4525b0c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9b0ede-5bd1-4ffa-aac6-52841e26ef1d", "sighting_of_ref": "indicator--42a03f49-66d4-4974-a917-ad906cf783a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6b6be9-3563-411e-9fad-c18c03fd58f9", "sighting_of_ref": "indicator--a000033a-6e7c-443d-9bc7-60e9fc0b1948", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885b1fb5-bf25-40da-bfd8-5db3134b2e0c", "sighting_of_ref": "indicator--fb453790-38b0-480e-9b3c-003e0da653bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6373f40c-2ff0-4a78-8db1-07c7f90ced88", "sighting_of_ref": "indicator--dfff3d5c-8f99-439a-8e78-5aa59d57ae2f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4f252c-7064-4b32-9ffa-7b6e16ae2a2c", "sighting_of_ref": "indicator--1864156b-c071-4303-9672-707fd495ae13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39d55ec-c681-4968-ac92-0f089bca4d0d", "sighting_of_ref": "indicator--75d38df2-aa86-479f-8d5b-610068fb241d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--715f81ec-8ab2-4ac6-b427-2d91502ee184", "sighting_of_ref": "indicator--96bb69bf-a1db-4489-bf3a-bc61c6f7a8fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b457010c-ab7a-4dcd-9877-e2f1aec0f598", "sighting_of_ref": "indicator--ed6b5461-d029-4670-b4d8-03f4354547ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e135f4-77b2-41fb-a789-fb9ba3c87ea0", "sighting_of_ref": "indicator--c9dc444d-2af7-4711-a67c-412144598e51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef57a6d-4efe-4078-9a76-0f7dd6b6c1c4", "sighting_of_ref": "indicator--9410c1a6-340c-40e9-89f0-3a57990aaa08", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb7c906-4693-4060-b62a-83b020e3a925", "sighting_of_ref": "indicator--f8acee30-f6fa-4e28-bb4f-a5926faad49d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f604129a-2e0a-4210-97bb-b0e3123735cd", "sighting_of_ref": "indicator--2a7742ca-be05-4993-b27d-b1991cae4c4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ec61aa-2207-4567-9296-ebc9bea26c18", "sighting_of_ref": "indicator--d5efbc1a-9b8f-4b04-9b7f-ad68db63b1de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45a7227-2c20-427e-a3af-5a61a2c50043", "sighting_of_ref": "indicator--2f70b25a-ed79-4452-bba6-555b1e8cd113", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c8a803-c500-4bbd-b956-eab266b93c7b", "sighting_of_ref": "indicator--21984cfc-e809-4b89-9f7b-d78e539b8d70", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575b12bb-b119-4a4a-8f09-373d7548fa18", "sighting_of_ref": "indicator--3ac6194b-06c1-44ca-9d79-c91f4d24c12b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5605a470-581f-4fb4-964f-3278569d9d96", "sighting_of_ref": "indicator--8f732b4a-1e8a-43e5-a126-2baf36a78077", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15465662-0ba6-4ed0-b5f1-507464a61861", "sighting_of_ref": "indicator--6e136d8d-56d2-4dd4-9ef0-6175db47e271", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d71ec4ad-502c-4bf7-8e95-2a106d6fd044", "sighting_of_ref": "indicator--6e136d8d-56d2-4dd4-9ef0-6175db47e271", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13414930-10d7-410b-aaad-1349664599d9", "sighting_of_ref": "indicator--5f06be14-aa6c-419d-b1cd-ceaa15db9364", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acff955c-ce0c-418a-be06-3abc0052fe3c", "sighting_of_ref": "indicator--5f06be14-aa6c-419d-b1cd-ceaa15db9364", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3a294f-3afa-486a-8945-1c4acf9856d3", "sighting_of_ref": "indicator--3ee9abc9-5ad9-4fe3-b6cd-b2b82d7a46e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ece753-5332-4774-9617-d5f6b1b5192e", "sighting_of_ref": "indicator--914f3ba3-8230-460c-915b-37e9c5a624db", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36ac358-0548-46f3-bdea-7a128464d799", "sighting_of_ref": "indicator--f1bd28a9-7a98-4de7-9c22-4bef8537d2c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de03f361-5462-4e04-8ea8-8047b221814c", "sighting_of_ref": "indicator--4448c589-0339-4385-9e64-d4d79b96237a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713cc175-511c-49a3-bd0a-0f751adec351", "sighting_of_ref": "indicator--4448c589-0339-4385-9e64-d4d79b96237a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e67753-b6b0-4740-9402-716537b1fab4", "sighting_of_ref": "indicator--69c37e4d-0375-4bc6-a43a-7195c6b95155", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c2a651-2d81-4305-8b2e-9e0188787c8a", "sighting_of_ref": "indicator--d942e32f-7a2d-49cf-a21f-9f772d06ee1f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dcbf70-b55c-4bf8-a945-32ccbc257fef", "sighting_of_ref": "indicator--ceea0079-8fd6-4d09-978f-7ddbe10e1183", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5771be60-fc47-4e12-94e2-060ee8f5d24c", "sighting_of_ref": "indicator--19cadb3f-c261-45c9-8e32-167fc901c449", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf830c8-5f84-4db0-88c0-4e0fc9c9b25b", "sighting_of_ref": "indicator--c95c0fca-ac39-4f81-8482-2f507154de53", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2156a4a3-5de5-43e6-8310-e111633ff927", "sighting_of_ref": "indicator--d46ca97e-f53f-42f8-b1b7-5662b19ab9ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d4cd6d9-3078-4752-bd6b-dff7f2b62a32", "sighting_of_ref": "indicator--56bb3402-4082-4105-9615-847ad4c3db06", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4969ec-136c-488b-887e-93512f5ce415", "sighting_of_ref": "indicator--1b37f545-ae80-47e2-a038-d41c32c2f790", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee73f936-e6c5-41e4-8f46-9817d5c755cd", "sighting_of_ref": "indicator--5258741e-7273-4281-a1a4-bc76ec8110a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49734be4-3730-4111-a245-24d711f3ddb7", "sighting_of_ref": "indicator--634638e0-6129-40f6-860a-ca5e2bc09aac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a75722-c2eb-4466-85c9-8bf81b062356", "sighting_of_ref": "indicator--6f6a85a5-8be6-4d5e-9748-d7eed0513021", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3149b616-e9fd-44bc-9886-3a611a975d2f", "sighting_of_ref": "indicator--344eacd6-e45f-41d4-9453-e47c5aa79a0e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905f001c-ffab-4840-97cc-6df245ed56aa", "sighting_of_ref": "indicator--af1bb34e-427d-40e8-aa02-407649ac5e32", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96608192-a31a-42c2-b7a1-068f63252bfd", "sighting_of_ref": "indicator--05110000-e05f-4426-972f-ee0a2ad044aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5cec672-490f-438a-9fce-7e4ff5662203", "sighting_of_ref": "indicator--6daa18ff-cc09-4cb7-adfe-83fd6b96380a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1abc9fa6-98de-413c-a67b-ef3e260c3e89", "sighting_of_ref": "indicator--de99ace6-04d1-4a6c-8dd9-9aa488e695dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e3a9a4-e133-4d9e-a38e-f0b9ad8a54c7", "sighting_of_ref": "indicator--dc10d9ba-31e9-4fd6-9ed9-2b56a2862801", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76504d55-cc0f-4a2c-a6de-d03cefc55b76", "sighting_of_ref": "indicator--a76bf906-c7f9-474d-a6c0-6dd997f9d6aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04382a8f-1e44-4bf0-b4e3-cd7f5efcf791", "sighting_of_ref": "indicator--11097dfd-c24b-4f3e-9853-b8182f7dae94", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63207508-9691-4468-ba9f-3ac01a1ebd6a", "sighting_of_ref": "indicator--eaf19aad-3f3c-4a4f-b246-5983532a6c1f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c2181c5-3746-45f6-b476-0bfdb5dba70b", "sighting_of_ref": "indicator--bcebc23c-83f1-4f6c-858f-06bcc5b68af6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9aa77b-417a-41b7-96dd-6d87131bab73", "sighting_of_ref": "indicator--d737ea06-2b5c-433e-a253-06becdf38857", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e960069-5557-498b-8496-e8f6b19c2e4c", "sighting_of_ref": "indicator--861dc3ff-fe94-41af-a5f9-55bfc748b5f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc1c589e-0b14-40ed-9cce-3f6ef83abdf6", "sighting_of_ref": "indicator--16cb532f-0dab-425d-889e-8e10c6b79f68", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c78559f-4ab8-4eae-8a2a-f320832ace15", "sighting_of_ref": "indicator--436d36b6-d8e9-4170-b936-140231147216", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a129b02-5ee0-4b6c-be14-221fa72707d3", "sighting_of_ref": "indicator--1d0e3699-ad6c-421e-83b8-20380c57b62c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e662d41-67c3-498c-ad37-8385699070f1", "sighting_of_ref": "indicator--bfad18de-653f-41e5-a4fa-9d6ea359309f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef14a73c-0b28-4197-9c82-1d06692da704", "sighting_of_ref": "indicator--e4452ce3-b986-477d-b6a0-ad177aa8caf8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf44076-eeeb-4a71-8644-b5f76bca1ab4", "sighting_of_ref": "indicator--5ffe78d3-0b55-4332-b3c5-4d910bbf18d9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9873eba9-bcf6-4069-b303-259c1e9907e8", "sighting_of_ref": "indicator--5244722a-1c71-485a-b6ba-fd062a0616ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d49a109-7146-4b25-a2a9-00e75abea4f7", "sighting_of_ref": "indicator--5244722a-1c71-485a-b6ba-fd062a0616ed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5649b2c-4a7e-4c90-8871-d046d6c093d7", "sighting_of_ref": "indicator--b67ecbc6-1fb1-4b0c-9c1e-41f53c82968c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9145d1-77bd-4588-aee6-fd5989504207", "sighting_of_ref": "indicator--b67ecbc6-1fb1-4b0c-9c1e-41f53c82968c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e75273-ce29-4ce5-82c2-997c45570f6e", "sighting_of_ref": "indicator--7b5ed537-c3df-4d09-9e09-789c416fad39", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771b60a3-4891-4939-b08a-a14257014ab0", "sighting_of_ref": "indicator--9dc1ceb7-99f7-4012-838b-05fb1f4a29f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1580a7-3df8-424e-b532-c2e989d96716", "sighting_of_ref": "indicator--774b2984-cb9a-404a-a699-838e46b89709", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00296185-6b8f-427e-b16b-03b18f13ae4c", "sighting_of_ref": "indicator--9358037d-da94-4f10-b8fd-6a642261b86d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d87ab88-5221-4ddf-be6c-ced8aa2cb5e6", "sighting_of_ref": "indicator--1565f607-4047-476a-9167-48c7e0d8cd52", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a6c213-cddb-4a18-91b4-84c8c9911285", "sighting_of_ref": "indicator--33771f04-0f55-4a65-841e-0ec1c5cbdcdf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5334d71-9eff-408c-b461-9f46b06a5769", "sighting_of_ref": "indicator--afc65c47-3ef2-4454-b0dd-e2e718eb72cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48d3fa5-1d05-4633-838b-f692a2ed225f", "sighting_of_ref": "indicator--7eb017b0-8897-436f-acf8-541ef0556877", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244649a0-55a7-4cfb-b1a6-02da18d351b3", "sighting_of_ref": "indicator--d601bb24-1301-4519-b3a2-850c1de40b72", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9791fb69-136d-48b5-9ba0-3387b3bee92b", "sighting_of_ref": "indicator--01e55b44-3cb6-4bf8-8792-1b6f311cbdf6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eaa9f2b-e88f-4409-87f5-3374c6c70736", "sighting_of_ref": "indicator--fff700b6-4122-4839-8004-94d2d0a43c43", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a9dc8e-373b-4dc1-8ee5-98d58aee6ab9", "sighting_of_ref": "indicator--64ca6266-7181-4808-9b09-e9085fbb0814", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a1de1d2-8176-4f4d-8c98-b9687adaa75a", "sighting_of_ref": "indicator--efdb47ed-ac15-4ee1-9883-d03e6485f809", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9be8a8-ab73-4147-94c8-4bc100209663", "sighting_of_ref": "indicator--3f517f9e-6594-4790-824c-5093e3783d63", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--038d7f9c-24e9-4abb-8434-f692d5dc2524", "sighting_of_ref": "indicator--a035cdf7-963f-4785-b851-5899f0809b78", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d2aab1-bd32-4a19-81b7-0be4a12941d3", "sighting_of_ref": "indicator--5f8af2d0-b3ec-4c09-b72f-31bb7d3cde08", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23d5eb8-cc4b-4156-b363-31bbe29c985c", "sighting_of_ref": "indicator--e7eb5850-274b-428c-87e9-007318770a80", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d00c475-9e46-44f0-9987-fe761e2ce496", "sighting_of_ref": "indicator--057127d0-9fbc-412b-86a5-d61ab16068df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829e3580-b5df-4790-971d-872d35ee57c0", "sighting_of_ref": "indicator--cb937ab0-2386-4327-847f-0b31171fdf31", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7b171b-c9b5-4304-80ef-8b66f14fce1a", "sighting_of_ref": "indicator--d5dccd84-8a05-42d8-a165-6ec0d19bcb65", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe291faf-448c-4867-8d5b-143472337431", "sighting_of_ref": "indicator--9efc809b-e0b9-4a51-bb3b-d6d89e6402c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc77790-26b0-4e1b-89bb-ce67ece541b7", "sighting_of_ref": "indicator--f6f37902-c73f-460d-aae9-2aec33fb3143", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38eba144-3ae1-491b-bb94-16484fcbcb65", "sighting_of_ref": "indicator--bd30e08b-eb92-4489-a8df-2e1f426506bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec18c526-e3a2-40cc-85bf-ec00d3f2f48f", "sighting_of_ref": "indicator--083d5f77-d350-493e-ae28-528200af0dbd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e86f9c-b5ac-4176-940d-336295855717", "sighting_of_ref": "indicator--b33aafaa-29f1-464c-877c-95025a138a52", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d650c0bf-2ed8-41ec-861d-b0b9fee09ca1", "sighting_of_ref": "indicator--11ee5fce-73f6-4060-94e0-3282d0096a51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d7dd75-f4c1-4396-b2b7-887276376743", "sighting_of_ref": "indicator--5be112dd-6a0d-4b24-b07e-708e6e0edc4c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0127fe-1f4b-4749-bec6-bedc80ae6193", "sighting_of_ref": "indicator--6b970fbf-3691-4678-9429-c8d4b697a2fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1047c4-1a45-4070-afa5-e8354fd2b0c3", "sighting_of_ref": "indicator--a77c9c70-3e90-417a-b49e-d40c06501aa2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8c4aa0-c1e8-41c4-850b-36d8b4612111", "sighting_of_ref": "indicator--0bd9669c-964f-4ea3-aea2-e92c2b1694fe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3eaf00c-ec6c-49a9-b7f8-c34cd757f7a4", "sighting_of_ref": "indicator--d04f993d-fe24-4817-8a84-2bd23c1565e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd28935-1566-4ad3-b6fa-9d00268e8cd0", "sighting_of_ref": "indicator--f4518adb-ac3e-4c0a-b041-8104016eca0f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df4e293-26d0-4489-a0af-59fb52a804ee", "sighting_of_ref": "indicator--f3dbc8fc-63eb-495c-a2b8-104858a48536", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57219b9f-194c-4288-b8de-d733e3f2253c", "sighting_of_ref": "indicator--7c76a76f-fae9-4f14-a686-9dcbc1bd46a3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f998b014-850e-4542-b7f0-03d123956ca9", "sighting_of_ref": "indicator--31d63d04-ea75-43eb-b865-f60997d682b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b9897f-2b26-4d18-91ea-84e0415d8a69", "sighting_of_ref": "indicator--dc3a2943-56c8-4e4a-b2d6-71ead61f56da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956f0fa9-ce70-450c-936b-cfe90857aa4c", "sighting_of_ref": "indicator--1a5bdedc-ae5a-4a46-a5bb-e95e6eaa7f7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80c35e38-dc91-42a8-a164-58700a884051", "sighting_of_ref": "indicator--d300f697-ba8d-421f-a1d7-2cb7c79b99d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6199dcbd-afa3-4e28-8a5d-27a864b10271", "sighting_of_ref": "indicator--2da31e67-956b-4c45-a490-36f059cd7015", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a5a6c4-1bae-4708-a15a-90628d6c57fd", "sighting_of_ref": "indicator--c1af390f-db3c-4a61-a4b0-5954022a6141", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152f3fb1-3350-43a6-887f-174c9aceacbd", "sighting_of_ref": "indicator--8128a9e2-9c08-424b-af84-10138ebb5e33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e266df3-add4-4917-99c1-aeb9704dff4e", "sighting_of_ref": "indicator--78580164-bf53-4c36-a3ab-31b73b94c4b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfacee3-f5bc-42dd-96ee-1ddb8bdc4868", "sighting_of_ref": "indicator--9830ee97-9d5f-4f80-a2e4-53225b460c1d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a9be19-d35b-4943-9957-a429d6eaae83", "sighting_of_ref": "indicator--40ca7799-b4d2-4cfb-9342-12e2a8ee1706", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c66035-e3b5-461d-8cf6-4ab9f17d288c", "sighting_of_ref": "indicator--9978f33e-40b3-42fd-a9dd-069b59dd68c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c31e8f-6db1-4cd5-8c4e-34130c793b6f", "sighting_of_ref": "indicator--5e5844a7-db6d-4314-8279-395145e4f642", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6f78be-3ed7-4985-b1d1-04eb9e0f8a75", "sighting_of_ref": "indicator--5a9aaf70-9f28-4754-81a4-f3d1ac8485ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d286380-2381-414c-b35d-22ca66c764ea", "sighting_of_ref": "indicator--c2026666-751f-46fc-9694-efef5c1b832d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e0323d-388b-46fb-bb2f-c83b07b315a5", "sighting_of_ref": "indicator--9ab17cb5-446e-417e-9300-8e3a92424623", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a62acf-2645-47c3-afd3-408b3e705205", "sighting_of_ref": "indicator--3deb0ab5-2cd2-4583-94ec-5520e24f5b0b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a2f03f-db85-4cc2-9c3e-ccc4e702c1bf", "sighting_of_ref": "indicator--8814e142-c5d5-4f8a-9a74-af510d226f68", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0304cda3-3a14-47b4-97ae-9f97d5507234", "sighting_of_ref": "indicator--4fd86e89-70a6-45f4-a431-f246a50922c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e58108-599e-4f85-bf85-e283d5c6bb20", "sighting_of_ref": "indicator--b95effd7-aea5-4562-91eb-57dd99671a68", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8306b72a-e864-4643-aa23-7bb9099db950", "sighting_of_ref": "indicator--5a130b93-5501-4506-a7fb-d2cbd5f6d46c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb30e773-5de6-4826-bb5c-468927117dd7", "sighting_of_ref": "indicator--335acfe8-b768-49cf-ab9e-6a4f7db7ceed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30afa063-b189-4e6a-95d5-71ec35453d59", "sighting_of_ref": "indicator--bcc00649-839a-4edf-af72-3e835cef5cfc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f542b75b-2a7a-4f14-a1f1-8f8e4dd9ae8e", "sighting_of_ref": "indicator--4cd4c903-b496-4c3c-8f56-d42f527253a3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63134e06-9521-4136-b560-adf868177d33", "sighting_of_ref": "indicator--a4841956-5976-49d0-aa95-f0c4751c89c6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90643422-7e96-4e63-bb64-935243f163e9", "sighting_of_ref": "indicator--6cf5c1af-93bb-444d-aa02-24bf1c53180c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1f4c9b-11c9-44f5-8ad7-71abaf51750b", "sighting_of_ref": "indicator--8458a2b7-42cc-4609-8e11-2796ec9d66c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf65b3cb-b199-4f9d-a2fa-b6855d7f3412", "sighting_of_ref": "indicator--e0207938-ad24-4e12-b9c1-6338fb5256cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a3cb56-e33d-4ed2-834a-7d240c2edff4", "sighting_of_ref": "indicator--3c4c9bc0-36de-44c7-89ee-fb4fb504cc67", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721b49d8-16f4-4eee-81f2-a5a559e9cbb3", "sighting_of_ref": "indicator--4498151f-b6fd-4aa5-a65f-6ce6b8fb86bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb66251d-4917-43f9-99e5-9562d99dab6b", "sighting_of_ref": "indicator--778eb9da-7242-4309-aa1b-02758915bede", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37502ace-83a2-47fc-9085-7b4582b38cf2", "sighting_of_ref": "indicator--14d2811c-f3cd-4913-9040-f09573212ec6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f839390-294a-41dd-8b92-5dec00e23add", "sighting_of_ref": "indicator--e6b17216-2e63-442f-857d-e6980100c8a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9afd96d3-0c2f-4a73-95d2-5dea5c704e55", "sighting_of_ref": "indicator--ce2cdf01-a8b6-4f37-bf06-93b21e4e6874", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559a981a-d178-4700-95f7-d07329d5fabb", "sighting_of_ref": "indicator--a321396b-9be1-4756-aa38-8c3ff38958f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e0dd65-da57-4d4b-8eb7-5bbc9f178ca3", "sighting_of_ref": "indicator--03885d5b-7402-4411-9fa9-11c057a2c9d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3eda58-2727-4db3-b87b-3118ad60ff85", "sighting_of_ref": "indicator--80930f14-9a5c-4049-a13e-fd1788595a9c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7dfb0b-eb4e-452a-98ab-5d911e974f7d", "sighting_of_ref": "indicator--f86ca20c-447f-4eb6-ad4f-09e572058647", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c04e8d1-b468-4994-9bf1-5d39d1508f9d", "sighting_of_ref": "indicator--ede549fd-9e89-405d-afae-72ff1f67ad06", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31936e2-8b9f-4fe0-8606-21b79323aaa0", "sighting_of_ref": "indicator--f5d3d46c-762d-4dcb-b17b-8c86a32bca3e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb82ea6-3267-4c2e-b6c5-ea2d7daf31c6", "sighting_of_ref": "indicator--a17704ec-3f4e-4917-82f3-0bf58dcc2bc2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189adc3b-8362-4d34-9182-4c869607078e", "sighting_of_ref": "indicator--010d9690-ed80-4ee7-96fa-c8aeda2046bc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6020c2f-e959-4a06-9969-9ec280ff958a", "sighting_of_ref": "indicator--7bdd366b-7061-4d20-a4e7-bcf60a0da9e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42652253-9e09-4988-81db-1b2a0e638de4", "sighting_of_ref": "indicator--1a4cc8a8-01af-4426-926b-ba94ef033a52", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a45a008-e0b4-4844-8244-f7fcfd65c0d1", "sighting_of_ref": "indicator--4244254c-71b9-4770-9d5d-e0504e87d3ef", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22897488-daba-48e3-a527-044348268c70", "sighting_of_ref": "indicator--ea997460-c481-4192-a29d-d140678cc3e7", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e75b0b-3713-4bb2-bd29-69a3b0ec4e8c", "sighting_of_ref": "indicator--ea997460-c481-4192-a29d-d140678cc3e7", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4386fed4-8b82-4ecc-bc8a-33a8c625231d", "sighting_of_ref": "indicator--ea997460-c481-4192-a29d-d140678cc3e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40d9fa4-acb2-42c8-b3ee-f4052f60e512", "sighting_of_ref": "indicator--3f7e7d78-9e5f-4899-9524-c7d600904b78", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c95eb4-c64b-48ab-8b03-af80377ca482", "sighting_of_ref": "indicator--3f7e7d78-9e5f-4899-9524-c7d600904b78", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a1b0a7-0d70-4b6a-a16a-534f4df1df56", "sighting_of_ref": "indicator--3f7e7d78-9e5f-4899-9524-c7d600904b78", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dc3912-69a4-4198-bcdd-86e50a83f612", "sighting_of_ref": "indicator--65370f3c-e277-4818-add2-715b5d6dddf8", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470561e0-7082-4990-853d-f2b97095aebd", "sighting_of_ref": "indicator--65370f3c-e277-4818-add2-715b5d6dddf8", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16e7d31-d1cd-4a23-90e4-d47391f0cded", "sighting_of_ref": "indicator--65370f3c-e277-4818-add2-715b5d6dddf8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d96a34-2f34-4fda-9d65-65910db281d3", "sighting_of_ref": "indicator--e1c39dd4-0aa5-496e-953a-929a2c1b1f3f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d5a172-e9f5-46b9-8a3f-0d672adcec4f", "sighting_of_ref": "indicator--12b5b9b5-bc38-4d5b-a2d8-aac48f0fe4d4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e07309-3c91-47aa-83a8-ed16dfeeb77e", "sighting_of_ref": "indicator--1199299b-d5e4-4293-86c2-15427edcfacc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb3f598-7847-478e-835e-93511dc1803c", "sighting_of_ref": "indicator--139dffed-ac68-4297-9174-639b59ccc185", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f0410f-e52e-4823-bd45-d6cc637b1a21", "sighting_of_ref": "indicator--d96e26f3-6005-488d-a9c1-94238435bca5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b797b8e-8e07-4251-98f7-ec6f7b6f3109", "sighting_of_ref": "indicator--ff527665-2043-469f-8248-8e7a6913ccd4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574f6160-af97-447c-9e40-ba1679b71a12", "sighting_of_ref": "indicator--8570c319-c421-4d4d-b6a8-5597da1b658b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c87975-fd87-4112-8f37-be5c1bf2a5e8", "sighting_of_ref": "indicator--e0008783-1ab4-4630-950d-75c3a35945f9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28e2ed0-fd03-4d0e-9f40-cb2c0516590e", "sighting_of_ref": "indicator--c8160d3b-2da6-498b-9a9f-0a013e50e924", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cffcef-a0cc-4099-af97-3b45a24d9585", "sighting_of_ref": "indicator--a3a872ee-852e-4a0f-94a8-5933328cdf7c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06285c19-df50-4eb6-8553-7d4eb438f7ab", "sighting_of_ref": "indicator--f3069094-f10b-4f6d-b057-b77edacb738f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf14ec7-fb66-4075-9e9b-e0effc7f269b", "sighting_of_ref": "indicator--40457af4-0c5a-4511-8080-c631af6961ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a447ef1d-71ab-4bd8-89a3-fe8d3890b05f", "sighting_of_ref": "indicator--6f35671d-9166-4829-b2aa-7a51edc12b35", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209e2156-47a8-4520-b328-047e0df80bf4", "sighting_of_ref": "indicator--f2c9e1cd-dbc6-4a66-b782-0a4c2dea1265", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fd654d9-12e2-4115-8f85-4ff559f03011", "sighting_of_ref": "indicator--1340eebb-859a-412a-b0c8-c41b3820b421", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dacff6-bf4d-43d0-ae9a-7e2a235c09b1", "sighting_of_ref": "indicator--1b0f6843-34c7-443a-8d86-b0caabc9efab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668eb7f7-f182-41d9-9ead-ef633fd817a5", "sighting_of_ref": "indicator--ff379b71-9693-4bbf-bff3-1ca5d6e0387a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2218c7-98db-4b8c-8c1e-268b11928a8a", "sighting_of_ref": "indicator--e1b3aa1b-d3c5-4074-b3c9-13448db5e39a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408f52e9-25d8-4f3e-adfd-2ba9419b6266", "sighting_of_ref": "indicator--5cb5502e-6d4a-47d0-9966-4c28f656baa4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ccad381-b8ae-4c95-826e-58da31e8d29c", "sighting_of_ref": "indicator--bc7f3ad6-7e44-40af-9ba4-7cddff3b91a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bd3fb4-4167-456e-87dd-d6e7cb798825", "sighting_of_ref": "indicator--49aa0893-3c97-4fb4-a76f-31199bc4466a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87c7e27-53d9-45ab-a1ad-d04adfe4f382", "sighting_of_ref": "indicator--ef7db926-ddaa-482f-aa88-1c8d2f02ebf7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e2cf369-5291-4705-afb9-0a0cca376994", "sighting_of_ref": "indicator--0a3a726a-158a-46b1-844a-c991418f60cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b881d55-d623-4b8f-b69f-46dff84b89ad", "sighting_of_ref": "indicator--f97e08ff-a7fe-42be-8869-8f81334b2d6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cf4586-efd1-41d2-a521-42655e3807aa", "sighting_of_ref": "indicator--f4e2f70a-5311-47c0-a54f-a395b071e5c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da147f66-e4ba-404b-a1d2-1d8dd9f06a27", "sighting_of_ref": "indicator--6aad428f-8b94-4dad-9e10-2cc519723313", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc87159-441f-43ce-a0e3-f5f65e1f0aea", "sighting_of_ref": "indicator--0bd4c94b-14f0-48c6-b180-c6613d902503", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14824a5-8aab-439e-b0e7-93799a260784", "sighting_of_ref": "indicator--f4a0981d-90f6-475e-995b-1cb64e03cd27", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cddd19e1-fa1f-4be0-bc5d-91f7d77d03be", "sighting_of_ref": "indicator--9825af54-3b30-44f2-a582-b6c156cd1cc1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcbdf5a-ce24-449f-b063-27944b29b2fb", "sighting_of_ref": "indicator--67c01714-468c-48cd-8f46-62ed7e57bced", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbed664b-cfba-4241-aefd-ce4986eafa0f", "sighting_of_ref": "indicator--55240736-89e0-42e0-b798-21e8e18eb32f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52827447-9cc4-4725-a571-6ff9f7cbbb6b", "sighting_of_ref": "indicator--13d04b2f-e2c8-4859-93ca-ddcbecd156a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba64456-830e-4633-9f8f-db4732e6518a", "sighting_of_ref": "indicator--d147bf26-c96b-4b01-99e0-85d676289ad0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112656aa-44a6-47a8-8f06-d789ba7c36ca", "sighting_of_ref": "indicator--c8cc790c-a3e6-4554-9057-2690022ec65c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8718d800-b895-4e42-8281-01378f2fe10b", "sighting_of_ref": "indicator--7d02fb2b-65ed-4665-b7d7-64a8af4968eb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac37180-b2cd-454e-ba95-3bfa2cecd290", "sighting_of_ref": "indicator--5967246d-4096-4fb2-b3a8-67a485ea51a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82aefc55-4ab0-4117-bd89-417afab39ab4", "sighting_of_ref": "indicator--63f14867-1690-4a9c-ae54-1b00ed36b834", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985fc01f-cb2f-49fe-80da-1051cf2d2dc4", "sighting_of_ref": "indicator--63ade79e-08cf-4c3e-acdb-542a16ac7405", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953c9e88-ddc1-4cdf-8157-0777ad67bc22", "sighting_of_ref": "indicator--f285b1a6-8bde-46b5-b0f1-0b4e58a9a7b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f625c1df-aec7-4fbe-9dec-a719cc30c58d", "sighting_of_ref": "indicator--9a18c232-c2f7-4d07-bedf-342da3e26945", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e9db74-b5b5-4a1b-8668-2cf6293d3a33", "sighting_of_ref": "indicator--e485f32a-1826-46ce-a399-ad2283a95ad6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286b42f5-d962-459f-9576-a6d90507abe4", "sighting_of_ref": "indicator--21dcce0c-8d02-4c98-bbef-5c8fb5c25177", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cacb64a-2538-422c-8e83-880f0bd2290a", "sighting_of_ref": "indicator--f0cb5b45-4a1f-4948-ab81-ec8691dbab01", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c271255-fbe1-43cc-a259-6c89295cef4a", "sighting_of_ref": "indicator--17179c06-4c71-43aa-8eee-92782c101b88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0278348-4119-4e91-a26f-7a1aa31c5149", "sighting_of_ref": "indicator--d212ac53-d8f7-4b68-809b-cafc896b48de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bf13ce-3142-43ee-bd5a-4ac241073011", "sighting_of_ref": "indicator--e5470c49-95cd-456a-beb2-5ca28ca995af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab19aafc-27e6-4bfd-94b6-ed9894c40c12", "sighting_of_ref": "indicator--5aaa0698-6f00-4640-ab0f-9b757b329bb5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ee87f3-ba95-4a51-958e-d4b9b1b85aae", "sighting_of_ref": "indicator--f40c9387-dd83-4046-ab7e-e506ded30831", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9663b1fc-6eea-40ee-9f5b-e88cf9ab36ba", "sighting_of_ref": "indicator--ebf7e724-e68a-41e4-a4fd-24f877ecd571", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cfdaeb-1d96-47b4-a4ff-765d6ed919f6", "sighting_of_ref": "indicator--20705f94-e488-4f3b-9af6-108b8897dda8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beeff3ff-1854-4fa7-9b13-facee2bfe001", "sighting_of_ref": "indicator--9ea2e637-97e1-4858-b352-0727ef7fdac0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47deb724-b919-425d-8e00-758f29ac219d", "sighting_of_ref": "indicator--ed412104-4408-49be-8986-da8c3fce081d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a31a1afd-4fed-44dd-ac9c-a72d8a3ee94f", "sighting_of_ref": "indicator--1b7e94f2-914a-475d-ae52-bef9874a0f56", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1355925-e7dd-45ad-973d-c8a8752a9626", "sighting_of_ref": "indicator--c5b8fee6-3da7-4d28-a1e6-cab07298b58c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfbd333-3e7c-4680-948e-3a7d69362d4c", "sighting_of_ref": "indicator--a82c0c57-1007-499a-ae49-4a0e57b1e479", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e279ef3-f4de-4e34-9df3-cb4501f15e0f", "sighting_of_ref": "indicator--df5d5cbd-1d92-4eb7-99ac-8de8084f568e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a052d147-3f6b-40a2-81e2-df2fe8e4da4d", "sighting_of_ref": "indicator--175b09d5-b1b9-42b6-a5f1-d0ae891b6be6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d243216-4279-4b1b-b781-6164982188cd", "sighting_of_ref": "indicator--8030aba7-3a8c-4ebf-9160-4071bc21d82d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8d9079-5fe3-4e78-96d3-2853b49a409a", "sighting_of_ref": "indicator--720afa68-d300-491f-9b22-28eb25f56dfb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7406ff5-2cff-43ab-be93-2f30872dd227", "sighting_of_ref": "indicator--94416de5-bccf-4d8d-9b85-b2543a3add64", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2baa5f2-2ba5-4e85-8a95-54e2b6868fe7", "sighting_of_ref": "indicator--a051ab2d-4a5e-4a89-89f5-25f4c6ad04c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bdbeb8-4189-42ed-b830-5ff4fcf00f2e", "sighting_of_ref": "indicator--b54ac6c5-d12d-48c5-8ea7-e85cb01ba7de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ea8255-1f4d-448c-8cfb-2330d30af154", "sighting_of_ref": "indicator--74dff32c-d742-41c9-8aad-e4919dc5320d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace6277b-453b-4553-a710-643fe101ed19", "sighting_of_ref": "indicator--646543bd-96e5-4d75-af43-cb1b72e16e79", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52b5f66-3c2c-4b90-828e-26f0b49a634d", "sighting_of_ref": "indicator--d96fba71-19e8-461d-accc-bddd3acaac95", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5719452-d4a6-4cb4-8bba-59b2a2b91950", "sighting_of_ref": "indicator--34996bd3-8be8-43a2-b5ea-53f1f712d388", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2c4725-3a58-45be-9baa-034d60d88e3b", "sighting_of_ref": "indicator--c619db7e-fd86-4589-ad8e-72775447f5e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bec44fc-7ba2-43fd-a56a-2890449082d3", "sighting_of_ref": "indicator--496e037b-a2ef-423b-a67c-08bfe76066db", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1339917c-3fe1-4f8c-a1f8-688245eeb2a4", "sighting_of_ref": "indicator--f210267e-a52d-44dd-8914-23cd389aeb84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efd3aff1-5879-4b0d-bc4a-75518047f8d9", "sighting_of_ref": "indicator--88c05fa2-a9d8-4daa-b191-8f828d7956f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800a11fe-63f6-4beb-a385-767c01cdaaaf", "sighting_of_ref": "indicator--3bdec2c7-1536-4846-839f-f54560a2dd80", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be122dbd-3df1-4359-a9b0-01a75c1b6b7f", "sighting_of_ref": "indicator--5549a6b5-1e8d-4b52-984f-d75c8cfd90f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc4c273-9424-43c0-959d-0f03d6e022bb", "sighting_of_ref": "indicator--e2821770-cb22-41f9-a07b-9383b81d054a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9045b360-a9a7-4d2d-9f2a-a176df1be863", "sighting_of_ref": "indicator--6ffa1a05-9b67-4ef8-953e-e15ef2a6f1f4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2fe257-cce8-4da6-a6a9-2d860800ce5b", "sighting_of_ref": "indicator--09803577-948c-43cc-86ff-c01fc2fed906", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccdf759-2ff5-43ad-aa36-c27d3e556809", "sighting_of_ref": "indicator--f3b0557b-fa1d-44a1-8939-4cbb314a608b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477354cf-802d-45c2-bb28-f9156b8a533c", "sighting_of_ref": "indicator--10f69709-a1ba-4258-bc81-43914b54149b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0c594e-91f3-4a10-b912-329d07f1b277", "sighting_of_ref": "indicator--9831d8de-27e3-4845-8029-b6d2b27002c0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06204b3e-3ee5-4279-b779-fac5911da47c", "sighting_of_ref": "indicator--eb0c6c34-ff69-493a-a45e-392357c102a5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6949922e-13ba-4f98-91c6-157f7d81b9f8", "sighting_of_ref": "indicator--638b5f7e-1585-4309-a5aa-5ba3d97524fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e67590-74e0-4c50-8608-70adf2b6f02f", "sighting_of_ref": "indicator--7cb3a446-9cee-4ffa-958f-8af2650b83d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f728869d-1670-4a9c-b519-696b361686c2", "sighting_of_ref": "indicator--b29b8e38-42e4-4522-862d-e2d48836d5d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc88544-d51c-4d4f-933d-788546d680c3", "sighting_of_ref": "indicator--475a4155-638a-4a7d-a6b4-f0fb0b640e4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53e1f6a-a104-4a8d-bad6-3ea1d5d057cf", "sighting_of_ref": "indicator--ab0d9f0e-eade-4813-b9dc-e928296d0eaf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbc91fb-6ab9-403f-ad3b-6b20e97c07ae", "sighting_of_ref": "indicator--651cd632-2078-473c-94e7-5c1c261dcee4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78865a2e-5b48-4efa-88ac-3101efc5eaa7", "sighting_of_ref": "indicator--00adfe34-906c-45d6-b21a-0465fac0c3ee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ae2893-e1ef-408b-9bc7-97fd247a27bc", "sighting_of_ref": "indicator--b1313a4a-55ae-4468-86d5-1b2269fd50ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdc1235-7dc1-4113-a086-f894b0210531", "sighting_of_ref": "indicator--bbb75f56-4b8e-4651-b2b0-110536f5886e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49a4255-0c81-42af-8f04-2bbe7999ca39", "sighting_of_ref": "indicator--212442e0-59a2-4ce1-970a-163e945cafee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141302ef-fd64-448f-b7ae-e5fed03aefd9", "sighting_of_ref": "indicator--d5866b90-48ff-49c8-b888-38aed42397f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bbbe6d-620d-48e7-bde0-8b7688d503ca", "sighting_of_ref": "indicator--0f9960e0-08b6-4b46-93cb-5e56566e41b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ebc495-5483-46b1-a063-83dd25f62eb5", "sighting_of_ref": "indicator--cfeb80d2-47cb-4459-9f82-d4871561a5e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a04e117-9e19-4d30-a690-8d6b55c5eab8", "sighting_of_ref": "indicator--70adefd7-1fd1-4a66-8bdc-784036c46483", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c9100e-48da-4904-a261-a31041701613", "sighting_of_ref": "indicator--db526837-d107-45e3-86ad-4a20c470e3a2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d75ba427-6439-439f-baba-5350dce952ee", "sighting_of_ref": "indicator--7d40147d-3be4-469a-8a3d-57728c8f40b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589e3bb2-65ee-40ad-84ec-b40918779f42", "sighting_of_ref": "indicator--2b939e71-0b55-4eda-85f2-46564b6d8ec4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db6b3383-3714-44c3-919a-f1da43b60a10", "sighting_of_ref": "indicator--e42924f1-a169-4c9c-9e81-1799b0ac2661", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382d8022-6434-4b53-939d-5f8bd6550c00", "sighting_of_ref": "indicator--fc71ddbb-cdc3-4182-91eb-f37ae43f1660", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457d81db-5dcb-4cba-88fd-963256f74d71", "sighting_of_ref": "indicator--7dbae8c7-3f2d-4cae-9152-2161681a21fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b423d2f6-4aca-4952-b2d8-af1e436b76e0", "sighting_of_ref": "indicator--8beab7ae-812a-45ab-9193-408149b354e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f961e6-2c6f-4651-b9b6-e2f5da8a4197", "sighting_of_ref": "indicator--3be30b35-c642-4d86-968a-bf29c8d687f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec38204a-9d0e-4a7d-9615-f8c60a295750", "sighting_of_ref": "indicator--077bd26d-6802-4a85-9985-f8185f9ae812", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e31036-9670-4914-83eb-b9efee4a26f2", "sighting_of_ref": "indicator--fb1dcaae-37c7-4536-ae46-52ce423495f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2c80f0-ad4e-4c93-a639-ba4a5d2bc8f6", "sighting_of_ref": "indicator--9922467a-c779-4a22-8f12-128e585d26f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41407bfb-4af0-47f0-82d0-9f6c351d2111", "sighting_of_ref": "indicator--a06de36f-2e7b-457d-ad44-1e54feaa4832", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60c193f-8cd1-40ff-9b18-7616218a57ad", "sighting_of_ref": "indicator--39217730-9daf-418a-af59-6e35fd66ef6a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0e3900-5c7b-4029-935b-9f81e6c2c17a", "sighting_of_ref": "indicator--1eedb884-770b-4428-8fe3-db8300d44f12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae5cdc0-9c87-4c4a-a386-de094f54324b", "sighting_of_ref": "indicator--ad4584e6-c57c-498d-bec4-817600297245", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d88cb78-26ca-482c-8dd0-1ca92dc5d4bc", "sighting_of_ref": "indicator--14e64bfd-cb0b-4d9b-99da-f5829cdb22b1", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c005581-1131-43d0-965e-af68b2dc2b83", "sighting_of_ref": "indicator--cdf04c1d-0e26-4ab5-9dd2-4dcbd83fbc9c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ed0897-3a4e-441e-a658-d9b03507065e", "sighting_of_ref": "indicator--da16ad41-ccb2-4ace-afcc-767fcdb76072", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3fd20f-2f89-4cb7-88f9-a5d7cb101467", "sighting_of_ref": "indicator--e45d011b-85e4-4123-b1f2-0186d1e08699", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c59f124-532e-478c-9426-d3a7faeac7ea", "sighting_of_ref": "indicator--a55ffb19-aa4f-4d4f-a9cd-715348d1e383", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2771327-b158-4305-991c-2b8f88ed5d9a", "sighting_of_ref": "indicator--306b1c9a-5b02-405a-97b5-bb7b13cf1b1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37b6e12-2d45-4c5a-b4d6-268efc6b11d2", "sighting_of_ref": "indicator--69d16f31-338e-4563-95b4-3ef9af35fbf4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ae563a-98fe-4786-ae37-214c73371870", "sighting_of_ref": "indicator--09d1b744-ce65-4f7f-9f87-013034e4ab4a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2418fe-d883-439a-a4af-a2ce12bc466c", "sighting_of_ref": "indicator--8cfc9886-bf74-420f-b1f9-dde4242d51dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f80aa4c-a936-41f6-9c34-fd0d137a5361", "sighting_of_ref": "indicator--46efa445-b2bd-4cf9-9d51-592458cc7d3e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb24da93-33c0-4bc1-946e-a6f8aeb2d027", "sighting_of_ref": "indicator--3f056c51-dcb7-4fae-a0af-8cd06246f539", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08d6476-2ca7-4382-a0d2-e23c054a3284", "sighting_of_ref": "indicator--f7f82038-55b9-4155-b247-68509e9c6143", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb23e37f-7ac0-4d1d-8573-2a718e145ccb", "sighting_of_ref": "indicator--f43e5e97-2f87-47d1-a8e3-299f4c014c87", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ced1eb-7d1f-4fe8-825a-fc738b563439", "sighting_of_ref": "indicator--c8eccd2f-2232-4f7d-8817-5699a17033a2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f049e717-b614-417f-a805-3e084a6314d9", "sighting_of_ref": "indicator--b06f6f36-9aa6-4fed-b85d-f99c8d02c00a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee27e4df-23de-4d31-9df9-6aceb26aa890", "sighting_of_ref": "indicator--7f4247b1-c679-430d-83bb-c9e2636fdcf9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f16075c-f82a-4f50-947d-17d961fefd3c", "sighting_of_ref": "indicator--c5d1fa8c-92cc-474d-8033-38a2ec5432ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0af6b7-9c02-40f1-bfc3-04fa4c2c1cfd", "sighting_of_ref": "indicator--47c3bb28-1a29-49aa-b7b8-523e911a86d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8390cd39-9344-492c-9e78-68d077c6d49e", "sighting_of_ref": "indicator--bc90f1ef-74db-41f0-83a0-43935f3cd853", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ce7af6-de0f-43d6-a5df-393fcec3d210", "sighting_of_ref": "indicator--3ee6c346-3a72-4476-815b-1c4aca587e81", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904afec9-d53f-4a45-8f7b-24ae200a92a2", "sighting_of_ref": "indicator--82d665f5-e18c-4281-b892-c7cc7633d016", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a06f80d-df96-407c-9281-63553c3d8849", "sighting_of_ref": "indicator--bfc27ab3-2d21-4ec1-ab50-f69b2f092026", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f1311a-0462-4146-927b-884d130135ed", "sighting_of_ref": "indicator--18d2315a-cc3a-4dd6-8582-601b656ab1df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43125357-77bd-4d4a-bbfa-692ea1df8f19", "sighting_of_ref": "indicator--cec99d2c-50ce-4763-9501-c9f38bc8af7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75567ed1-ad6f-49c6-8674-14abe511c1d2", "sighting_of_ref": "indicator--9c34f05b-9305-439b-bd18-c45b32068bcf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db66f85-5d5b-422f-90c3-3f4bdffe1b79", "sighting_of_ref": "indicator--27148e8e-c929-444e-8d9d-abae65d24f55", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d179248-8b28-4f57-878b-7a5bda249153", "sighting_of_ref": "indicator--6891b595-d255-482d-9e8e-73e05b9a1a23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca5c553-4d2a-480e-99c4-af4f3ae1017e", "sighting_of_ref": "indicator--a6b677bb-6c7e-4680-8a32-d8c0bf8bea05", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9caa057-effd-49e6-a397-ef90cc485c7d", "sighting_of_ref": "indicator--408f11c2-c810-4f80-b97e-7abef3c10780", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c70beec-ec10-4c78-8417-29c815aea3b1", "sighting_of_ref": "indicator--88a49c47-5ce0-4974-8fd7-a45280e5e969", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941b447f-7165-4905-af11-102486cff98c", "sighting_of_ref": "indicator--16d02048-c069-4fc8-9deb-c984078eca8f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d96c084-c649-427f-98e6-8a13c0d5f484", "sighting_of_ref": "indicator--20d044d2-c9c1-46b0-a728-d41fe2d59de6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28f85c1-48cd-4005-8618-7b0c36a57174", "sighting_of_ref": "indicator--719acdb1-428a-4ede-b79d-c41c05e73739", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e424dd-db90-4a91-8dfa-9ef74ea7c673", "sighting_of_ref": "indicator--7ff47b6e-e659-45be-ba51-f5e8514287a7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf90ee8e-a8b4-4c26-9182-cf04344c6260", "sighting_of_ref": "indicator--8a62fdc4-1772-413f-9eae-d5c09f39a579", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696b3ccd-7479-47e6-bbc9-d9da1d54fcac", "sighting_of_ref": "indicator--b6e56ee6-74fa-4ca4-b7e6-c1083f770155", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1464f42-bb77-4fc8-9b0a-b924279db3cb", "sighting_of_ref": "indicator--4db1aa26-ff31-449d-ae4a-8d51d02cb32e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e459365-088a-415f-a0b2-0fc275a11c5c", "sighting_of_ref": "indicator--1305d2ed-31f9-46bd-9203-c007f3c25e7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ffcaf7-8cf4-419c-8dd2-67d8b1b8aabd", "sighting_of_ref": "indicator--abed973d-4692-41a7-8363-391b0e61fc66", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f144d0b-b194-411f-8374-cec7cb3afc2d", "sighting_of_ref": "indicator--38926a16-2400-4af0-8517-7eebcdf68270", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64cf833-74fd-44e3-88b7-ef890f3502a8", "sighting_of_ref": "indicator--ded0f54d-1cd5-4f9d-a8ab-79471bc4a799", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91fbe06-14c7-4a70-8c31-4206332707c6", "sighting_of_ref": "indicator--956e5c37-48a2-4083-8b5b-1036dff53b31", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc97da21-0bf2-4362-aa7a-c5a3f1aaa3cd", "sighting_of_ref": "indicator--ff705482-5804-4c0e-a3a3-96e04c01356d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeb4a08-78bd-4a5e-8119-18d9803644e8", "sighting_of_ref": "indicator--f7f750da-49b6-4d1d-8565-d50535dff565", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c295d5d-d72b-4878-a2a8-3d81f621b404", "sighting_of_ref": "indicator--3c4dbc44-9b6d-48d3-95aa-e828ed55aad1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4868a0bc-06b0-4bfa-b401-8c670142032f", "sighting_of_ref": "indicator--dfd7101b-ccdf-4e86-a8ee-a5f262a8c604", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58372f35-cb9b-49cd-ab32-4ba9bc9bc728", "sighting_of_ref": "indicator--c2451b25-9079-4f0f-9faf-bd4ff9a28be4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2280ad0d-a72b-4eb9-9dde-ae5c3e8ad3f3", "sighting_of_ref": "indicator--a7335b06-6176-4384-950e-0f3cffd0692a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688a8e5c-a201-4a51-bc2b-cf673ebb501f", "sighting_of_ref": "indicator--40487e67-fc2d-4e13-95ef-6adceac516f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--661a215b-5e3f-4d21-bc0c-ccaac27ceec2", "sighting_of_ref": "indicator--01f72cd8-4284-487e-a055-6862941cecef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871b06c6-825b-467e-8583-9f1db46fc582", "sighting_of_ref": "indicator--84c9c6dc-f3d2-4e20-8040-6ecdf5bcd3dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35eaed9-54e2-4213-b65f-d79bad3e7f55", "sighting_of_ref": "indicator--5bfd2024-176a-46a5-bded-57179bc20046", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f5b565-8f86-4faa-93f2-84852b83ef3d", "sighting_of_ref": "indicator--52982352-31d2-4af7-be85-6b7243f119d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee75947-d62d-4968-82fb-2537079e7adf", "sighting_of_ref": "indicator--b54170d4-f1de-4e08-b28b-2882c0928df7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69dc53d-b8c7-48e2-bfdd-82d0d9d17433", "sighting_of_ref": "indicator--007cd4b8-4d00-4246-8251-24d502f82a0e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be05a90e-22dd-4aab-ac0d-30c0d7b81ea9", "sighting_of_ref": "indicator--dba6d2a6-832c-44ed-bc51-5afe6b6f49ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f105d725-021a-4bd7-b2f0-8033a838ca87", "sighting_of_ref": "indicator--ea5c24e3-6e65-4ac0-bc6d-8e7e791a0108", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c945ebb-ac12-4f28-b606-3f76b378af9b", "sighting_of_ref": "indicator--bcad80d1-a5c9-46aa-88b4-140f6a3446e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27169d28-6a25-4646-bf41-3826d86fa7bf", "sighting_of_ref": "indicator--ce493ae3-a06b-48ba-884c-5a776098a45c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a94493-da78-4799-b2a3-f751b1cf92ce", "sighting_of_ref": "indicator--27aad664-6264-4cec-b53a-8a9be4fb24b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4126e1-79c6-4aee-a7d9-cf48c2cd35a8", "sighting_of_ref": "indicator--a6950c37-f6f3-4c22-9182-359aea23384d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6f7785-aa54-477b-8dce-be5336978ac6", "sighting_of_ref": "indicator--c959c468-1eba-4e05-bd82-798f2e01b377", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5188d022-6a2b-4645-8d91-ff6b1aaa92c9", "sighting_of_ref": "indicator--69d54fdf-f754-444e-a50b-d59881ed492f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f4afcc-f2be-4a6f-9633-3ef04c7cbd0c", "sighting_of_ref": "indicator--b992fa88-9528-4594-86ba-f9785500bfa4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869688d1-78db-44e5-86a6-905be9497ea2", "sighting_of_ref": "indicator--cb3d280e-fe92-4ffe-9a55-d086aa527eb1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a710da4e-d419-4049-a936-527db9d41321", "sighting_of_ref": "indicator--8c6b379f-f2d3-4190-9bf0-d8a5a3388697", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18839b82-8e5d-4879-92ba-9eddbdd7fa11", "sighting_of_ref": "indicator--e2d889d6-65dc-46bf-9d29-d308c65e5a2e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66a2604-7ad1-405e-ac56-c2484b6eceaf", "sighting_of_ref": "indicator--a15e29e0-91c9-4f65-9906-36f9bd3a7f13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce0027c-67ce-45bd-9b2c-b2aead55f303", "sighting_of_ref": "indicator--71793dc2-85bb-4952-a0a7-d572af0d038d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c10d33-6004-4d62-b6d5-43d67f80b49a", "sighting_of_ref": "indicator--a5e74368-d948-4e81-bdc9-3cf81263ee14", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75063a2-e1cc-40f3-9900-a230e687dbb6", "sighting_of_ref": "indicator--f3d22de1-ebdc-409c-b556-6fcbaf85f6c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e11f2c8-e779-424d-97aa-5c287fff0d2a", "sighting_of_ref": "indicator--79c52bfe-35e2-4928-823b-6306053bc4b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2582dfd0-b429-4d54-8f90-feac794ecc6e", "sighting_of_ref": "indicator--41bd1f99-6391-4a2f-8000-1476c60adbca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90393a9-a41d-44d5-af68-328af7fb373e", "sighting_of_ref": "indicator--26f50d9a-4792-4b57-be0c-4d572de7f176", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c3bbdf-b410-4a6a-b5ec-2170a3465be6", "sighting_of_ref": "indicator--907083b0-d23b-4ae4-8909-de22776f34ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005905b3-646f-4d15-bbf0-22376b76fb37", "sighting_of_ref": "indicator--2697b4f1-5914-4332-a1b1-9f0217881c7e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04df3a4-e241-4be5-a285-dc94cb153100", "sighting_of_ref": "indicator--ab95085d-08f9-4bef-9ac6-7948556d0167", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d83b733-f79e-43e6-8713-3f93bc2bf93c", "sighting_of_ref": "indicator--9228d0a9-492e-4173-9b64-0c38dca3a791", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457229c9-63c8-4a2b-b323-c3bb7aa0a08e", "sighting_of_ref": "indicator--329d19b4-8bda-4765-8d5c-2146a76d6462", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625e3ca1-0748-4f5b-818d-1ec10c4bdc86", "sighting_of_ref": "indicator--375aabce-d7a8-48e7-bce1-f429de184be6", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f17dc7-1fcc-4e4c-aef9-c102926b1921", "sighting_of_ref": "indicator--647f334f-9cf2-49b2-82e1-48e68636dda9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ee844e-844e-4fe5-a4e9-a1c0f489d1ff", "sighting_of_ref": "indicator--4016f153-7aed-4d96-bf42-629db83167b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09fb4d8e-b6bc-4c9a-8f44-6c5467f4016b", "sighting_of_ref": "indicator--4f8f6f12-2eb7-4eea-941a-883bf70adaf0", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597ca6e8-1891-4204-9c64-3041608eea54", "sighting_of_ref": "indicator--4f8f6f12-2eb7-4eea-941a-883bf70adaf0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63691e91-e391-4687-bdf3-874903480459", "sighting_of_ref": "indicator--c4de0453-f2ef-4f2b-a3ae-be73e520b8c6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6916b407-419b-450a-ad6a-7d577a00daa8", "sighting_of_ref": "indicator--d3d69e7b-1202-4d6f-af62-cc0d41d68d1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42ff710f-7452-4f17-9ba2-c97fa13cc965", "sighting_of_ref": "indicator--ddb37ed8-e87e-4535-b3e3-abc808fe9845", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9af3817-a889-46d0-a8ed-fda884c37781", "sighting_of_ref": "indicator--c3ba9a4d-1029-41c1-af7f-11bc8c8ae6f4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6846c734-5242-4d47-b149-a48cb7010c35", "sighting_of_ref": "indicator--963d78b8-27a0-4f67-ac98-8fef2afe99ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df57603b-6be7-46f9-a56b-57ebe6f23c85", "sighting_of_ref": "indicator--3ef442c0-e4e4-4a90-8620-3fd8ca53ef27", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752093b0-2a3c-42b3-8fec-099fe86afe9a", "sighting_of_ref": "indicator--b6c8bc89-a19f-41a7-b646-36591bb68fa5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1506050-e6e6-455e-adf9-13bc449ac54d", "sighting_of_ref": "indicator--3a992d48-a4c9-4c64-80f9-c5e0b8479567", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eba391f-92a4-4f21-b913-43aee20e3656", "sighting_of_ref": "indicator--84da9453-e7f4-40a7-9067-7c2a42859c92", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcc84776-a360-46ed-ab78-1536660cfc43", "sighting_of_ref": "indicator--6727505c-45f8-4ace-82c2-5fbfc23f4b8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9f7811-c134-477b-adca-3425a11a51f5", "sighting_of_ref": "indicator--7d615ca9-79fa-457b-a243-03533559ea02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0995fad7-1285-4a6c-add5-24351fca1c53", "sighting_of_ref": "indicator--b78d8358-e08a-455b-97c8-b3484c29a2f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada2b9d2-321c-4f11-9988-c83db7fa224f", "sighting_of_ref": "indicator--d3be944f-755f-485a-8a3b-cf638a6297c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6000738-1a51-4417-bf35-dc491ef07c1f", "sighting_of_ref": "indicator--3d5d5ffc-2cb6-4e52-b500-76c366424c8f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d27aa5-5ce0-48b0-bcc8-fafb6d843f62", "sighting_of_ref": "indicator--daf6edd4-3f52-4f55-a47c-fc822a7746b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceed9d05-be99-4928-8105-f4ac09aa2f46", "sighting_of_ref": "indicator--84c0a42a-1029-43a7-bdaf-fc1e71ff8feb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b700a6f-f730-4642-8457-9bb73eed4465", "sighting_of_ref": "indicator--e7bd4d57-c9fc-4852-bce4-e8d1bf4275f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8594d0ef-a9fa-46e7-99ce-ec5c5bd1f987", "sighting_of_ref": "indicator--76947eaa-8778-49d3-8d62-eb090f1c5eb6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07c989c7-fa3b-470d-a769-3e894996d684", "sighting_of_ref": "indicator--b4602910-6ecd-4c8e-aeb3-a08419819d03", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b97908-6610-4a3e-a9f4-2085e20d5386", "sighting_of_ref": "indicator--e8f0efa7-ccb7-42d7-adfc-e230a489f825", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1378e9b5-f6fc-42d2-a353-39c07c4bac4f", "sighting_of_ref": "indicator--3c1de2de-4200-4395-89e2-801c4d2cca8a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056ec904-11b1-4751-a686-9d7882b58e97", "sighting_of_ref": "indicator--d1a18534-04f0-4b20-8746-117215e6cdae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b94d4d-79a9-4dc8-b9d1-c0bde0b033f2", "sighting_of_ref": "indicator--9e2a4128-5af8-4157-a780-edf83ec16951", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a39809-3f38-424d-8791-a1054db468cb", "sighting_of_ref": "indicator--3f0ad75c-c744-458c-be97-af675bfaa4f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60a9bd3-1309-4120-8a98-c19d741d7081", "sighting_of_ref": "indicator--ae786181-c3ff-43fd-bba0-fb5a7062d0a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed1ed06-1212-4588-bff3-49ed6ebd05e5", "sighting_of_ref": "indicator--6d21184a-2522-409c-bad3-3d74b60e4936", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e13941-7252-49a0-8c02-e96a5310dbf3", "sighting_of_ref": "indicator--589b8117-2573-4091-bed5-413be6f14e5f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04485dd9-9af3-4a93-b1fb-e317c73b38c8", "sighting_of_ref": "indicator--51c3471e-4351-4560-b9dc-4da26e724cbb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652ca974-4c23-4eb2-b388-67dc6246cc22", "sighting_of_ref": "indicator--af95fd52-c3d2-432e-9335-7081b25444f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f95752-28ad-4f84-857f-af902bf01628", "sighting_of_ref": "indicator--ed1b3a8c-6817-442e-b8e8-5cc02ac695af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7631f9d4-61a8-45ea-9f4e-7e87ac5fef7c", "sighting_of_ref": "indicator--67a6e96f-82c4-45ee-ad97-bc49104929d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2c5440-6943-491c-9de2-588a75102a5d", "sighting_of_ref": "indicator--4bdd013e-9155-498a-a125-6dd827f1f6f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688d434d-ff35-48f3-8d26-9b6509d0bff1", "sighting_of_ref": "indicator--4bdd013e-9155-498a-a125-6dd827f1f6f6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--092ff8e3-a260-4b78-9795-738ff8573988", "sighting_of_ref": "indicator--663b8bf0-db23-4671-8548-5e5ff17f20bc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56699335-db25-4a86-9048-1ffd3d7518ab", "sighting_of_ref": "indicator--5adacf47-5170-4b38-b015-f557153a7ab2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12f13d6-4161-4898-adce-c835226438dd", "sighting_of_ref": "indicator--529ead80-533c-459c-9c1c-c29aa8d7dafd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f50cdac-1c08-4879-be63-032d8bd7b9f7", "sighting_of_ref": "indicator--947821c2-f120-47bb-bbbc-b2371c24e069", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f74536-2b7e-4fcb-a895-f0c831e9c719", "sighting_of_ref": "indicator--756367bc-c278-4f68-ad16-1921d2c0e6da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d096ce-0a78-4a49-97f3-3a175fea54e3", "sighting_of_ref": "indicator--2514addb-4a9d-4ce1-9f14-4dbcf705a5e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14efc6c-6bfd-4beb-85b8-3e4d87af36e2", "sighting_of_ref": "indicator--91b4d4b9-92cd-4400-abb8-2d355998422b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f18a5e4-3b6f-41f4-b377-de9198e21ffd", "sighting_of_ref": "indicator--91b4d4b9-92cd-4400-abb8-2d355998422b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0cc171-0ffd-4fa1-ae92-c5d9bcb79a98", "sighting_of_ref": "indicator--4bdfb1f1-2e60-40c8-bcaa-e25d6cc62ee7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5093c83-d796-40e7-b4cd-af06733cde40", "sighting_of_ref": "indicator--6574cdb1-1b37-445b-bba8-d833bac59312", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e052d9-031f-46ca-a9cb-ff7380ac4300", "sighting_of_ref": "indicator--47fe5671-766d-427d-aca6-f749444befad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd6e4bf6-6d51-4eab-a03f-7f5def9045f5", "sighting_of_ref": "indicator--13b9a055-147e-4708-8159-5360e2d4d972", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ebcd60-da32-460b-ad85-ea7371ae1281", "sighting_of_ref": "indicator--419c517f-5d07-4b54-a705-3035561256ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36675a8a-c8ed-4e94-9e60-451673d6e8ba", "sighting_of_ref": "indicator--adeea02d-1acf-43a5-a409-d533aa7e32d4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773e208b-7fdc-4950-8d0f-04f26cbb86cf", "sighting_of_ref": "indicator--768e5bcd-e1fd-4866-8049-1d264f453b1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90edb986-8a9d-484a-88af-dd4d1fd52eb2", "sighting_of_ref": "indicator--ab53d84e-9fd5-4860-9d5f-f109740ad5d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba382fe4-401e-4cab-b0e9-e784b829a063", "sighting_of_ref": "indicator--965d23ea-27f1-4c18-bd33-0b14ae598255", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71b034a-cf6c-40a3-b0e6-0f3dbdd6a881", "sighting_of_ref": "indicator--5495c00a-1467-4207-8780-f107200ca462", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7411ef3a-10f4-4b21-986f-97e24cd63635", "sighting_of_ref": "indicator--57803d3d-0ed6-4868-b668-99b4afb1452f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53173132-4fd0-4603-91fe-d2a97b13ad18", "sighting_of_ref": "indicator--57803d3d-0ed6-4868-b668-99b4afb1452f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd5d826-45ad-45ff-9c5e-0ed58b4245c6", "sighting_of_ref": "indicator--0e158f07-40a5-41ec-81ad-7503cad50ef3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2f109b-af84-42f6-b9ec-6b5da601e030", "sighting_of_ref": "indicator--151aeaee-5710-4953-b9d5-5f1e5730aaae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e3910f-6218-40ea-a563-d2dd1302161b", "sighting_of_ref": "indicator--c20b9d52-95b0-4590-ba7a-f45d1d8b0797", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e7de14-8c12-475f-9be4-a611af7d0461", "sighting_of_ref": "indicator--7ce69cd8-0f6d-4a22-bfd8-bb463e9d0e34", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105b620d-670d-48a7-b82d-94a70c4a3032", "sighting_of_ref": "indicator--f1894195-3fa6-4d6c-8bac-d79d2473d566", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90077f71-a118-413e-ac14-8457dacb10cc", "sighting_of_ref": "indicator--89000bea-5dcd-4a42-b9b2-4d044c5a79b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196da172-4c99-4fce-8dbd-f0606f126efd", "sighting_of_ref": "indicator--71150306-07a2-41b6-bf34-67334dbb9cd9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15023b4a-ac77-4906-bc20-5d65178be9d4", "sighting_of_ref": "indicator--b48f4997-9610-4c9b-b0f1-dccb68486772", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11c48d8-8c31-4565-a68b-56a4ff2e8da5", "sighting_of_ref": "indicator--d120f078-f52f-419b-b883-fa7a6b903ab0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a463f540-c1de-4485-8e1d-7e914df0703c", "sighting_of_ref": "indicator--cc531558-6ab6-4a6d-acbc-ed809f473356", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41a4b99-4b33-4888-9380-2b3c986c9b14", "sighting_of_ref": "indicator--5fb6b4b3-7813-44c2-88ab-3cc0fa5fbdc0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb12ae65-b237-40e9-85d1-1ddc9ab61b5a", "sighting_of_ref": "indicator--10cb4073-9f68-411b-b006-f230d7a181d4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b0026c0-35d6-461d-beb0-bb583de3d4b7", "sighting_of_ref": "indicator--9b69f9a1-72ac-4611-a9d2-7bfd98b45d94", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e067691-9147-4219-bbec-2a8300c5b488", "sighting_of_ref": "indicator--3dfad20b-752e-4322-bf74-152be7d815d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce0eff8-5ab5-4c52-8eaf-d977ba00a91e", "sighting_of_ref": "indicator--2c4cb691-261f-45fa-9424-b060bcdce841", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1332aa09-d8e2-4d07-b027-87d49858f377", "sighting_of_ref": "indicator--b18bd55f-eded-426e-9de1-1ce7c41a582c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0984d6ae-d35f-49f1-9648-0b9acdd37f70", "sighting_of_ref": "indicator--bc6941ab-4f91-4066-badc-c5169f5d6247", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937bd2d4-66c9-4143-acf6-f1b4a5bc2910", "sighting_of_ref": "indicator--248ece5e-c66e-45c9-bf7c-97777b22f3db", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e0dc95-7881-4aba-8388-9816a96163e0", "sighting_of_ref": "indicator--95324cf9-3a9e-49a3-bd8c-9d141ed10d39", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7112e59f-7dec-4b8c-bbfc-a25ddc5d6973", "sighting_of_ref": "indicator--dfadadec-cc5b-4021-a232-1c53b2f0fa76", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d05a32-a700-4d03-82f8-cabd68dd05ae", "sighting_of_ref": "indicator--6b280fda-3ad1-4f25-8d6e-49bed0743385", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c40094a-3aaf-410d-b4eb-191f7d474ce2", "sighting_of_ref": "indicator--f0bdaed6-4598-4063-a0f7-5b6e107976c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5fb4ef-564a-4f2e-b5d6-ef6350b61e2a", "sighting_of_ref": "indicator--bfe42d14-c126-401a-844c-7af395f172f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658c23ab-5eea-4230-afd1-db64545918a5", "sighting_of_ref": "indicator--bfe42d14-c126-401a-844c-7af395f172f4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23399ebe-f34a-42af-96ba-61801ea23a9a", "sighting_of_ref": "indicator--f5e0aa20-5e05-4547-8aa8-c9b3b6a08d1b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abd08ba-a019-4970-a9dd-10a630a4231f", "sighting_of_ref": "indicator--5fa67a9b-68ee-44f5-a49e-d011bcce2e3d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e6d1e2a-0adb-4119-9bd3-1014c6f22bd9", "sighting_of_ref": "indicator--7c3bb9c8-9d4d-44d4-a16b-ed00378d5b09", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbe22e9b-3ce4-41b5-bf3d-3226d07098cf", "sighting_of_ref": "indicator--f0d63b6a-1bcb-4a01-9505-5fd78d2178a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f09de4-ff50-45be-9334-c688ff2d11fc", "sighting_of_ref": "indicator--8e367030-6d82-4689-a865-fb37b543a124", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32c90d9-ec3d-4cc7-8b8a-1c0afecb3b41", "sighting_of_ref": "indicator--b78669a1-b9c1-4080-b732-b7dbe83494ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaa33b4-fb78-4ca9-a2b5-169aff98876b", "sighting_of_ref": "indicator--55a68285-e25d-46cf-9c34-cbb22f1cc7f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--729918be-3b1c-4bab-98f5-9ed4c702ca7a", "sighting_of_ref": "indicator--53088d2e-a3c9-4a4c-ba56-75e07d8ca483", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d86c608-6034-45b2-9379-1768f5a144d8", "sighting_of_ref": "indicator--506418c0-9911-4579-9efe-fd288d0ab7fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf0316c-be45-4ea5-aead-c59103aaa576", "sighting_of_ref": "indicator--bda2f5e8-48d0-49a6-a06f-64457d8ad5fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46537b15-6468-47a1-8ba9-f61a1cb9561e", "sighting_of_ref": "indicator--110a680c-97aa-44bf-bd43-2d879347f2fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e23145-6bf0-4b9d-8a2d-e8d5ea484818", "sighting_of_ref": "indicator--5ca16b50-273f-4e7d-9260-801e61407ff7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04ae79a-f09f-469e-b624-647306720a48", "sighting_of_ref": "indicator--1f733dc6-7475-4f76-bf5c-21f4eb4edc43", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96cc04c-962d-45e6-ba36-5ec07ff864be", "sighting_of_ref": "indicator--8866789e-1cd6-4505-a5f3-6a2d82a3d64f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e9231a-c7d5-4e64-9cbd-996d994d0d96", "sighting_of_ref": "indicator--b92c1d2b-2b04-4e17-b61c-87edab21b9f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c378f80-7f09-4d66-91de-73facf181537", "sighting_of_ref": "indicator--036404ea-3133-4be8-8bd1-c0d2c82b6162", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fae4e6-dc16-4855-a63d-6252a1303573", "sighting_of_ref": "indicator--a2a92467-730a-43c8-908c-8dc5e07efcc8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cedcf4-74e6-49a3-8c93-d58b7e271798", "sighting_of_ref": "indicator--594cf5f5-0c68-4561-b6c1-b031f0ee79ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c60447a6-5ad4-493e-b28e-6556f5d74d96", "sighting_of_ref": "indicator--8ca6a9d7-34c5-465e-b8b9-dfe9d4efe11c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221676d7-07bf-49be-a683-bdce89ef4856", "sighting_of_ref": "indicator--3e4f9198-20f0-4240-92d1-b6fa1e4a86e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cd2ef0-b0d5-4814-bda6-8952493e0640", "sighting_of_ref": "indicator--1fa42f7c-dc1e-458d-bb34-4be34fd7a5c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101430e3-00b4-4ced-b4be-35cd1e56f5fd", "sighting_of_ref": "indicator--a47761eb-2b20-4701-9262-1b8d0872c590", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0499f21-11b1-46ed-b54a-350354b41a1f", "sighting_of_ref": "indicator--b2ce7d81-88ad-43cb-8050-19719264990b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc797b91-fb25-4d35-a433-8b199f2f05e0", "sighting_of_ref": "indicator--2f90aa0f-90df-4477-952c-4a880c4a19d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5620012b-a4a3-4575-86eb-427ddd0de622", "sighting_of_ref": "indicator--33fb7dbb-0a1d-450d-801a-ed4f6e655bae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--538a9f8f-7044-4564-bab5-cdd1f74fbd31", "sighting_of_ref": "indicator--6dfd33d8-e205-4c69-b5a9-5eec95f2b22d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eae26743-812f-4617-8cdc-e2d4209206cd", "sighting_of_ref": "indicator--1336e297-2b2a-4bee-b9d8-e94041faeeae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03051bae-a3f0-4199-86fa-8c525ee3d6fa", "sighting_of_ref": "indicator--8cc1a02a-88e1-4f77-9f1e-9bff7612ab58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf536db-1219-4c7f-b029-2b588f7f1302", "sighting_of_ref": "indicator--44ac32e7-d27f-4324-881e-ffdb85ca6a29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a38691d-368f-4376-aaa8-bb1a18ab954f", "sighting_of_ref": "indicator--8b6e5791-10cc-4b61-ba7c-838769629b57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ad086d-285e-4380-a359-747388647afd", "sighting_of_ref": "indicator--f1b1e2cc-9f40-4e21-9db8-e077eb57a651", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a7f3efb-1629-4294-9520-cfc255abdce1", "sighting_of_ref": "indicator--4587261c-f835-4059-8e1a-1457bdb134ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20058524-5bd5-40e2-966c-51128d117095", "sighting_of_ref": "indicator--01a9a6ea-44f6-439a-a2f0-aaeb57263721", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b492319d-5d9d-4a47-9c5c-b976af4bfa61", "sighting_of_ref": "indicator--06d9577a-299b-4c1f-9b38-71ae1ecbfc1d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55656f79-fce2-469d-8c2d-9d4ac1afc658", "sighting_of_ref": "indicator--cf827119-b807-41d6-8289-351230c9d678", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf39f91-1cff-494b-a0d7-6b414108cb6f", "sighting_of_ref": "indicator--4f8156da-4237-404b-8fc9-97c835aa0d70", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4341cc-0892-4d2e-a1bb-6d808ab9efe8", "sighting_of_ref": "indicator--e7bcc7ad-6255-4ff1-aa1e-b85f63467da2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce18b0d-87ea-43ae-9976-1ff59eda563c", "sighting_of_ref": "indicator--2e7e43b4-9e37-43f9-8235-a193d5d0872c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f218482-4724-4a28-b1fe-914fcb547873", "sighting_of_ref": "indicator--ec70256b-647d-47d8-9ccb-683fb1bcec4c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47181c25-95a5-48c3-8394-888639790a82", "sighting_of_ref": "indicator--684b16e7-ce1a-4e3b-991b-ad719543d139", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3535e64-f972-46e0-921b-b5350dbcf01a", "sighting_of_ref": "indicator--c2f09c54-b98c-42e2-b7a5-4b9fb319022b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f49b98-81b0-4d7e-8c5d-435895688f3e", "sighting_of_ref": "indicator--18564407-0d17-43f2-b490-29609e5b1552", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d18d3b-364b-4237-885b-2514c48c42d5", "sighting_of_ref": "indicator--f45d050e-6d1c-4173-987e-10cabe243495", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf23649c-e550-4d5d-9ae8-b5297189b55e", "sighting_of_ref": "indicator--4ea8cc14-4122-4c97-8693-e76187ef56c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b16ee5-563d-454a-9b3d-d98f00ad6a7e", "sighting_of_ref": "indicator--b9f01f77-1f31-400a-b005-64b65593bc27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb12f0d-f769-4d35-ac79-804c3dd78447", "sighting_of_ref": "indicator--4868b1ac-d71e-4e93-ad31-20a3597efff2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4dfbb8b-3de9-4b7f-b962-0062d784e2f7", "sighting_of_ref": "indicator--c1aef9eb-28fc-4591-9b20-e51d7c497540", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f8f805-608a-48c0-bbb2-9a6db96a1fb7", "sighting_of_ref": "indicator--adddb110-9acd-4550-a16a-d984cb1d8235", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e331d96d-470b-4169-b0a9-159bfdec68d9", "sighting_of_ref": "indicator--e1e5a4f4-54ea-4d46-aa42-4c046bf845b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da67e541-c47e-4f28-b7b6-d645f680e7f8", "sighting_of_ref": "indicator--82296710-4ba8-4a29-afde-0f5d9610a807", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad4a62e-069f-4526-aa4e-fc63c44d6dd7", "sighting_of_ref": "indicator--69c884b4-2947-47cb-a61a-7167cb7a8271", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde2dfc4-a2af-46f8-b1b4-c27299f7bcf6", "sighting_of_ref": "indicator--2b2d7fd5-de4a-481d-94cc-912caefc85e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8faa0ad-6c78-45ba-9a3c-459aeac9830d", "sighting_of_ref": "indicator--6b325733-3c94-4a7c-9324-444d0bea84ed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b20bc5-5671-452b-a3f2-c86e2d9b9876", "sighting_of_ref": "indicator--8ac86167-6222-4549-81b7-47fc7b61269f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdef1a5a-c94f-4632-b8d4-705041858b5f", "sighting_of_ref": "indicator--c4e86432-038d-4aeb-94b5-3573c9a85a5f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c26243b-5b62-47e6-8ff1-895ac85e27a9", "sighting_of_ref": "indicator--8302b096-c616-438e-a8f1-379e495a88e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a2d98a-f851-4b3c-9ac0-6702e542bc2f", "sighting_of_ref": "indicator--ee816e00-758d-400d-b0c0-2d07e19d1bea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d567b361-ed82-4a65-91b5-25c8f1a584c6", "sighting_of_ref": "indicator--a6bb1713-df23-45d0-b123-761cd05bbf0d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cda7b37-105d-4a0c-b5cc-8d71c10dc30c", "sighting_of_ref": "indicator--6ec84509-d0c9-4554-a2a1-25456f4479c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c28de5-e104-4820-8d8e-7098c39d0434", "sighting_of_ref": "indicator--c4d2c95e-720f-4897-9827-36effff26919", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354469e3-a09c-48fe-83fb-71e1d4ca3595", "sighting_of_ref": "indicator--82182584-a50d-4915-bd65-0d06089b7a29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2174cf7-9c2a-4586-b2f2-f20b478a0435", "sighting_of_ref": "indicator--62a786ff-fd58-4556-bade-9c0f5e603210", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8d6959-7491-4c5c-b208-2e922753a8b8", "sighting_of_ref": "indicator--989a35dd-7fba-4d57-ba1f-89f7adab5507", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6612e776-dcc7-4e1d-83a6-2ce4a09c9d97", "sighting_of_ref": "indicator--29ed7ece-d956-498c-94a7-8162d05f3aa6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36002d42-6b69-4ba7-b6c8-987ba5d4591a", "sighting_of_ref": "indicator--2a6a4175-0c0a-427a-af7a-eb5992571f56", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9b3fdd-e84b-4493-938f-08ec62011dd1", "sighting_of_ref": "indicator--ad186b09-714a-45cc-b87b-5e1b4fbb5f49", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be08a824-9258-4bc5-bd72-2f914768531a", "sighting_of_ref": "indicator--09c59193-e9c1-4854-a31e-e9f3e1da32ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f3f246-8c12-4582-ba58-0cfc1b354e4b", "sighting_of_ref": "indicator--473d1adf-730c-4d9e-8593-51752fd35437", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c68910-6bca-4bf2-b5a2-c67bcd1ff178", "sighting_of_ref": "indicator--04861db8-07cf-4ab8-b2bd-ae215c93f7d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd3c664-3fd1-4731-9d53-dd4619dd5475", "sighting_of_ref": "indicator--f7a613dc-db9b-46c3-953a-c6b6ac1a43b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a36cfd2-e072-4d51-a7cc-48afd54a9b73", "sighting_of_ref": "indicator--b62466b0-45aa-47b9-a45b-fa7e6b292e6d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a9f2d9-2c9c-4624-bc37-a3a82f87d037", "sighting_of_ref": "indicator--6069161c-d867-47cf-8da4-d0c5963f739a", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b289a05-aa7a-4f50-8a61-a5a772fe3b82", "sighting_of_ref": "indicator--6f5df877-2461-4a84-a547-b69dbb4e0351", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad6df66d-4cd1-48b0-a0fc-101338243b42", "sighting_of_ref": "indicator--3f41bbbc-076a-4a52-9683-686748450996", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaf4a82-590b-4e25-9cc5-693c2466eff7", "sighting_of_ref": "indicator--4fdbd590-a201-4d37-852a-4e8caf247fa6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7de1d8-1db3-4ae1-bae2-af48729623e6", "sighting_of_ref": "indicator--10441ad9-f19c-46bb-b71e-d82538ea8fa0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9427811-f3cf-4296-ba15-3a310cba21d3", "sighting_of_ref": "indicator--55fd9652-d448-4cd2-abc4-e1d0dcecbded", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e832a800-55e7-436c-be95-c5dbf0ebeda5", "sighting_of_ref": "indicator--72f2a5d0-de77-420d-9c18-89ca39382366", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fd531c-a522-4e78-b9bd-281ff5fde2dd", "sighting_of_ref": "indicator--6f08fd80-4f0a-41ac-a57b-9be5ac194c57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e778f59e-abc7-4eb0-b1cc-1285aec3bb3e", "sighting_of_ref": "indicator--8a305c5c-be2d-47dd-932c-bee602356abe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a05ef6b-0b73-483d-9dcd-57becc18fe5c", "sighting_of_ref": "indicator--985da7d9-b544-4fae-8140-2c7d05123037", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0568f6-a1fc-4f42-9f62-d7d3cd28e7bb", "sighting_of_ref": "indicator--b4749e4b-f637-4a27-b307-cb48f7496ce9", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106da739-38db-4c27-91f4-0844e75c5ae4", "sighting_of_ref": "indicator--cd698e87-3176-4ae9-978b-da059167e581", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d55167-084d-44ac-9e7d-7ff675b30b08", "sighting_of_ref": "indicator--667b50c7-d0b5-4d95-aa12-4a8d91fc9285", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd24da32-38e2-42cc-904c-494ac2a164a2", "sighting_of_ref": "indicator--0e85207d-a16a-4fbc-8882-ee624dd4662e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec63b51-4319-4c04-b891-020fa5c5565e", "sighting_of_ref": "indicator--c0fe5fc0-a1fd-43ba-a712-59ae5b587675", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb490b2-3d34-4617-b904-ee946c558168", "sighting_of_ref": "indicator--7d6d998c-4295-4abb-869a-36888698180c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cd593a-07f2-40d7-8800-5ecf476ba6c3", "sighting_of_ref": "indicator--3efa946d-ca18-413c-af89-93733cc6d702", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0673dbe-095a-45a2-a25a-bf5319af7692", "sighting_of_ref": "indicator--38d2adff-a51f-40d0-a585-952a071a0ca5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf60c3e6-74f8-4d96-ab1a-0e30add8b628", "sighting_of_ref": "indicator--8e21ff21-fce4-4883-947c-d364717a0ba6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac87605-244c-4742-a0a6-6efc0abd555b", "sighting_of_ref": "indicator--5959c0ca-abff-43dd-9eb4-e3d8bca8ddac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac59704e-041f-45c1-9da1-e2411602d494", "sighting_of_ref": "indicator--41189c39-b356-4f44-90b4-5e62e80c99e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29bc8e1e-3f91-47dd-ae69-910cacb42e61", "sighting_of_ref": "indicator--77c3d7bb-145b-42e7-a526-089b33ded9ec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9ff72f-01ff-4ca3-8ae9-e7c24b911ac2", "sighting_of_ref": "indicator--c3903192-8f71-435f-a423-50c03a0152d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea17f8c-1925-439a-ab23-c77a01a52b57", "sighting_of_ref": "indicator--a9f915a2-4bd0-43a5-976a-b9b2597ed736", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233f877b-a4d3-4167-a8eb-ab4d004b0a57", "sighting_of_ref": "indicator--3b495c8c-075b-4aba-b0cc-477e4983c2f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34a98f5-6d25-45c1-8a0e-8b54cb70cdea", "sighting_of_ref": "indicator--8a753c45-d83c-42c5-bc87-0243267708fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62181d3-3ad9-4565-8718-79a95b511de9", "sighting_of_ref": "indicator--145bc422-b5c7-4992-8710-051c3c68e178", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec43c407-9195-4afa-9d1d-9c074d72810a", "sighting_of_ref": "indicator--c34612b1-5a90-4ae5-bb02-7756262183e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022c45a9-0a07-4846-a571-e8405cebcffd", "sighting_of_ref": "indicator--49928083-7479-4fbb-9ff6-c1cd60d89dba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c06d84-fd7e-4628-9745-afdd6f7588b8", "sighting_of_ref": "indicator--917ebc76-295d-4640-9bc9-ffd93aa42b6d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a64d437-2197-43cd-b418-366fc2dc6526", "sighting_of_ref": "indicator--cbe0617e-3b25-4573-a8ba-a48f8f15d4b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8f977d-a727-4c32-887b-6404d0b4e5f1", "sighting_of_ref": "indicator--70e9376c-f770-4b7a-b698-871f07bde1fc", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edff7b55-d4aa-4aad-9bea-fbadc04a3b2d", "sighting_of_ref": "indicator--01770f22-b36c-4df0-b5a9-a80db70553b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44586c45-1ef3-40b9-8b1b-660c49bbc866", "sighting_of_ref": "indicator--0f5ba930-6cc9-4f51-bb65-004e5a1bbf11", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4816993-5ba7-49ac-a9f8-1eff812d1085", "sighting_of_ref": "indicator--8bbe3b1a-277b-45be-8fa5-641453b880e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30501adb-8aef-4253-8f50-60318447b2fd", "sighting_of_ref": "indicator--8037effd-6998-45e5-8aba-41fa9acee997", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f0e649-4166-45c1-8d01-5bfab1356fef", "sighting_of_ref": "indicator--2fec0486-aac1-4620-a689-d86b12532bb2", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002d90f6-5172-400b-87ad-83f63ace9bf9", "sighting_of_ref": "indicator--2fec0486-aac1-4620-a689-d86b12532bb2", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066a57af-29ed-4489-84fd-4c2f9bc4e378", "sighting_of_ref": "indicator--2fec0486-aac1-4620-a689-d86b12532bb2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d6aa33-5090-4141-8f84-2f6307792d5b", "sighting_of_ref": "indicator--fde100f3-4537-4a6f-9eec-2965daccd11d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6287eb65-d904-4c18-9e24-7794735637fe", "sighting_of_ref": "indicator--6b477ab3-30b6-4e47-96c2-987a17ec3207", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9573eb2-0fe7-49e8-a702-f887dc945c44", "sighting_of_ref": "indicator--f9486db9-f2bb-41a2-adbe-aeb3e7d62a7e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89840824-6aac-477b-af0d-14c4464c6a6c", "sighting_of_ref": "indicator--d34b2402-00f8-48e8-a808-45b33c4ea00e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968d5970-a5db-40e3-9c6f-bb9621293af0", "sighting_of_ref": "indicator--c4c4ce5f-9585-4985-9b11-206f4622b4eb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75aad1ea-3b51-4490-ac12-ab497d8eaf32", "sighting_of_ref": "indicator--0dbde0be-4121-44c3-86ec-10345d534262", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5943ea-b18e-4fbe-9cb0-9f16a4bc0c49", "sighting_of_ref": "indicator--ef072ef8-9f79-4e3e-afbe-6fe386dd2dae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614a73c0-bfd0-4c65-9391-05dba1305eb2", "sighting_of_ref": "indicator--259f7f9c-42aa-42bf-a113-c8347cffdce5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87057b00-0f6d-4ee0-b0ca-b610ecefd360", "sighting_of_ref": "indicator--0edb844d-82d3-4b20-b2c2-bca514ff689b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fecda5b-3290-4d70-830c-6a50ec0742ca", "sighting_of_ref": "indicator--81621aa6-7d71-4e0a-9bfa-20795d202a51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9df691da-3440-45da-806c-5a383ac0120e", "sighting_of_ref": "indicator--2b18e90c-4583-4ff7-a9c8-4581b09ab6f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683aa47d-3d81-4510-9b7d-e8004f6b20d5", "sighting_of_ref": "indicator--9c8338b5-14eb-460e-8285-904f597e9974", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fb1875-0003-495b-91b7-31f08b51732f", "sighting_of_ref": "indicator--3ce50db4-211a-472d-8b77-d8be36974087", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab82d21-f9fe-4e81-87cd-95470f082cb8", "sighting_of_ref": "indicator--8595296b-5e86-49d2-8714-9f1cf17d6e8d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb0cb4d-d9a1-4ca7-91a0-1922119536ce", "sighting_of_ref": "indicator--60d384fa-cd72-4875-b564-6a63b785555a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a376c0e4-13be-4891-9c26-cbe0c5fba341", "sighting_of_ref": "indicator--b9494776-faf1-4564-842e-e93363b6db6d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5cb82b-b74d-49fd-83b6-4d8e1f8917c4", "sighting_of_ref": "indicator--e8096050-1704-464e-8025-230d0a552117", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04caf52-4ca2-410b-8d35-52d8531eb576", "sighting_of_ref": "indicator--7264f6f8-569a-464a-aa70-5606f2e1f390", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2af8e5-a93c-4c27-952c-f6ef07f65732", "sighting_of_ref": "indicator--ec3f2ff3-56cd-43aa-b33c-9b98f777b30b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a1e2f3-1621-445a-8835-c32336caab3b", "sighting_of_ref": "indicator--b159975f-4d6f-410c-8841-03eda5276d62", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505de6a5-0051-4565-96db-a4ecf4063632", "sighting_of_ref": "indicator--b96ec0ac-a882-4ffe-b442-28f1da42f73c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c55406-9cf5-42a9-94f1-52215fba673b", "sighting_of_ref": "indicator--27f89087-0c20-42fa-adfc-7cfc8f226490", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c242e92-5181-4d97-8d87-95d697d038b4", "sighting_of_ref": "indicator--e97ce6ae-2b1e-4cd4-9687-f1a9599d6742", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18644e83-0b69-4ed9-88bd-c185d68da62a", "sighting_of_ref": "indicator--c2ca2891-b93e-462c-ad41-e01aad6c2296", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f297a116-b132-4438-b58c-87c8236213f2", "sighting_of_ref": "indicator--57d8a318-03bb-47d4-93e0-c5dde749c930", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a610d33-c23c-40f5-bc13-a71f1a78f1ed", "sighting_of_ref": "indicator--dfe66e29-b0db-4158-b615-13ca1377f228", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca603393-230d-41dc-bc11-f11447cfc8f5", "sighting_of_ref": "indicator--0ea7abd2-1ad3-4e78-801a-f0843c7b5c99", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c04e116-4cbf-445d-9304-d768484bbf66", "sighting_of_ref": "indicator--fc603a19-bc91-4e1c-bcee-30aee4415198", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f580c2a-c356-4143-9bc5-bf25bead4764", "sighting_of_ref": "indicator--9f16cc9c-0d49-42e5-b546-8b9bc1f1d184", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d20c59-6c35-4d56-8bbf-09aaee4f1eb0", "sighting_of_ref": "indicator--2165ab75-ceb1-4ff4-bbc1-7b914c7aef49", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcaf753d-c6d9-4fd5-b76f-ecd55c68511c", "sighting_of_ref": "indicator--3ae0b891-f151-41dd-af53-f4513cfd854b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1176398c-760b-4bdb-af45-3a51f658e044", "sighting_of_ref": "indicator--7ac7a931-1a13-4adf-840e-76cfca9ad67f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c07cdb-375f-4770-a1b4-43e7a1195313", "sighting_of_ref": "indicator--28415c7e-a699-4260-8795-907801d18a25", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330a3e5a-fa31-45f6-8bb5-9dd162012eb2", "sighting_of_ref": "indicator--371d06ac-9056-403a-b331-e57a7a2c7eb2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2be7d5d-cc9c-4af9-805a-fb9290cf936c", "sighting_of_ref": "indicator--fe6bcf58-9b4e-4bf9-8665-49cd398af0bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4edd27-0fee-4aaa-85ef-efe1bf73c6c0", "sighting_of_ref": "indicator--8273b94d-d4bd-4e82-86de-a447b1ce8f58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--153c8e85-cbea-4734-a0ec-7294a2160ac4", "sighting_of_ref": "indicator--193bb3e7-929f-424f-8726-971646e36725", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bdad08-8a5f-4db6-9da8-5fd93dd10ade", "sighting_of_ref": "indicator--113aeba9-2e10-420f-9c43-8ca4c11b7489", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4490eb-4831-4974-b4ba-ba130cc6f82c", "sighting_of_ref": "indicator--8852ac94-e8ea-4344-be76-842463e56d8d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b45898c-7155-4176-b50b-23069549bc77", "sighting_of_ref": "indicator--edce9d1f-7565-4918-b023-7ca802b95a64", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18e83cc-fcf0-4a4a-9236-6fbe995ac5cf", "sighting_of_ref": "indicator--d4b870b9-fb63-4183-ba18-07237a663d05", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d36346-8802-429a-a45e-0d5bb286835c", "sighting_of_ref": "indicator--2179c017-df6f-4647-8836-bc21d3d2014d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b2cc9f-50e3-4477-92b6-7d5dec99f067", "sighting_of_ref": "indicator--0880cdf1-26dc-4ede-98aa-bb3630319508", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb296819-bfde-40a7-8dc3-e5a442c611f8", "sighting_of_ref": "indicator--f88ad4b8-e4e6-431b-8064-bb2708b1be03", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9015136-02d1-4de9-a04d-0f59bcc9f2f9", "sighting_of_ref": "indicator--b21dc109-5ee9-4e3b-9542-e07bfdd2c993", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd834927-e8ab-4693-9bbf-b4833b0af3ca", "sighting_of_ref": "indicator--f28799d2-e4f8-4b48-966a-1524cdc3c41f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91dd4892-b60a-48ea-8479-e99359bc3b7d", "sighting_of_ref": "indicator--854db009-6784-4662-9f15-f763613747b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63951b9c-65f4-4974-8ba3-d4b9464e7b47", "sighting_of_ref": "indicator--6ea36294-6930-4283-84af-e2f9b7c62710", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a9b850-be0a-4753-b5c2-bc42f271ee0e", "sighting_of_ref": "indicator--ef4f4608-0836-4f97-aecf-5e2b8c89b12e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1036e39e-d8ce-40aa-95d9-d4149bfc22ce", "sighting_of_ref": "indicator--c6fb42b8-50a9-4269-851a-23d4ef5de46e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adeef33-337e-45cd-869b-c9495b22ba37", "sighting_of_ref": "indicator--aed0b4c4-1866-4283-a30c-fae0adaed2cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79347c9c-84e9-4a60-9b28-d50c91517542", "sighting_of_ref": "indicator--409b7d75-7271-4058-933d-b1c52633613b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ad0cc3-cf92-415d-9acf-61d58eaf588b", "sighting_of_ref": "indicator--805131cb-25d0-43b3-a575-30cecd9b8ca2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a751e2e1-5131-45a7-9d4f-d35c7da4126e", "sighting_of_ref": "indicator--ae7d6fab-9689-4258-980f-c99f834dea56", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b0c37c-9baf-4102-9543-f56b1616d2ef", "sighting_of_ref": "indicator--999a4130-a018-4f74-b6de-69db987bef64", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14807285-2b5f-49fd-a914-34fab9ce8aec", "sighting_of_ref": "indicator--cf7abbb4-d1ca-4885-b0aa-74b3de7e5d11", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41300c5-3849-4290-9eab-952d25d39714", "sighting_of_ref": "indicator--7186c58a-390b-4dca-bdec-b784f32b151e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172f6791-11cb-47b3-8927-00e88ced4072", "sighting_of_ref": "indicator--ff19c1c5-8178-459f-afa2-b6438781d954", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973614d2-9af7-4df4-8df2-07cef597c58e", "sighting_of_ref": "indicator--07bd16a5-088f-4460-be76-65375bcd3026", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb76ac79-babf-4674-a0cf-eafbd37f8ced", "sighting_of_ref": "indicator--01000f2e-7012-45eb-bb01-28cdcf2f7e1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f33f812-21ec-4c95-a2e7-c67e25c62ead", "sighting_of_ref": "indicator--82f0810f-8f92-497c-942c-5252d39f0dc8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573c3e55-b042-4196-9cf2-090b908183bf", "sighting_of_ref": "indicator--1eae1095-c2e2-43ed-9be7-35f84129712c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f89da10-c15c-40cc-9f10-1e64e0dfbf32", "sighting_of_ref": "indicator--bca3ccb2-30b0-4f3a-a7bd-a74ea6035529", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f45a2c-b21a-40fb-a45b-b9aa3e7ee20a", "sighting_of_ref": "indicator--b8f661d8-c197-4954-be72-fea05ed8cbbd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5a5921-71c4-4133-b493-b8f5d1fd9b69", "sighting_of_ref": "indicator--9af4be22-d0f4-4f86-b24d-95a956b1ae8e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f200530-720e-4611-b4ef-bb89ce2a3297", "sighting_of_ref": "indicator--e7b81b79-db75-4b41-b0b7-a9846075a7fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f4ca0b-527a-4509-b918-3c1ec21869c3", "sighting_of_ref": "indicator--3f9e63ca-afa0-4527-95b4-47b89b179107", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212b6073-b09a-4504-a8a1-7ac86e5a1736", "sighting_of_ref": "indicator--bb747079-b4b0-4448-bc2c-53b0e152bfc0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f77d85-f01c-4f65-b916-95e6e3dc7e35", "sighting_of_ref": "indicator--b886b16e-aa9e-4a4c-82c3-e1e085b6029b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd8f672-e930-4563-b5fa-5d2bba80d472", "sighting_of_ref": "indicator--f76c17f7-ca3a-4ccf-b680-be6a70bbaec0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38860f9c-9941-442c-819a-fdc82ab56114", "sighting_of_ref": "indicator--3567ba0a-a296-4a0b-9b23-4eaf79305d5e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41900520-2ce6-488d-9ec6-276d1b3ddf0c", "sighting_of_ref": "indicator--c0c77b2a-9ae0-41f5-a9a3-c65a27e3f970", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091ef92e-aaec-40d1-88b1-d06617c54764", "sighting_of_ref": "indicator--3e35e856-84d8-44a6-a694-a93cb37b8522", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ca5e05-7d22-4341-aba2-887780f47ce8", "sighting_of_ref": "indicator--f0dc4185-6c2a-4b6b-99d0-c8c4657ee8fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0eee554-2880-488f-9963-7484b6590bd7", "sighting_of_ref": "indicator--f3b5dcaf-1f59-492c-ab93-708616388934", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37848cd9-68cd-433f-b16f-ed0e67b3cb27", "sighting_of_ref": "indicator--49335146-490e-4428-95cc-9fbd3bfa4679", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c7aa06-b46a-4ffe-a21d-2878c355a1a6", "sighting_of_ref": "indicator--c9131282-3a40-4328-8f0e-e79fef464025", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5236a9cd-9f39-4040-b7f3-6597dea80bf6", "sighting_of_ref": "indicator--644a1dab-bb35-44ba-ba27-063578507143", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a076159a-f2b9-4330-a189-ea0516c361c9", "sighting_of_ref": "indicator--566a9d85-c40f-433b-b2d7-fab720a838a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2844fa4c-97dc-45a1-a18a-1d2d483b9138", "sighting_of_ref": "indicator--efa75c7e-8285-4025-9e94-0641820f0d29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd61ffc3-820c-4d89-aa1d-7cf1d22da5d3", "sighting_of_ref": "indicator--4bd7f4fc-9482-4498-8936-63154ecb9a03", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89af51fe-4568-47c7-983d-71494a2b4074", "sighting_of_ref": "indicator--577c0353-86da-4d48-9e2c-281fb4157a2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c674d41-3329-4df8-8893-dfbe6895a8e8", "sighting_of_ref": "indicator--bf376a96-139e-4c2d-be80-210034cc9733", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d926da-40e2-48fe-8a6f-44f47693de67", "sighting_of_ref": "indicator--8032b3d4-e93e-487d-8593-d05e06f48610", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d05ba4-9def-4476-99c0-ef8790139e9c", "sighting_of_ref": "indicator--49525ed1-3d34-4382-bba2-ff23af119918", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4780ac00-3bb0-4229-a11c-ac47453233a0", "sighting_of_ref": "indicator--64827ebe-ec44-4de7-a4ea-edf848541cb7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ec0156-658d-489d-8b4c-bdc2b2c896f2", "sighting_of_ref": "indicator--c1460114-4b19-4ef4-8d50-6c13a844ca0e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7a955a-8e00-4beb-a61c-08fde67875be", "sighting_of_ref": "indicator--0504b099-c32d-46cf-bf11-ed3974a6e5ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead8322a-00c4-4dfa-8c54-d2ba1c36f77e", "sighting_of_ref": "indicator--ae3fb60b-9abc-4685-841d-d18a62ad10ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc45effa-286d-4308-b2a2-b6c849950e46", "sighting_of_ref": "indicator--c1da780a-a6ee-4138-8a0c-816a15897691", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f8e08b-9eb0-4961-af36-67602f48490a", "sighting_of_ref": "indicator--97fffd66-3942-44ea-a74a-5bd4840c5021", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9978fee-bf43-41c9-8772-7a456491eaf3", "sighting_of_ref": "indicator--e4149353-2b34-4cbe-b4f3-7aa702d7dcd4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6147a294-66d6-4bfa-98a8-a290e623c2be", "sighting_of_ref": "indicator--def09cb2-31d0-4f67-8e43-d74e1a3a2345", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef1fbe3-6d26-4422-9388-517f0a4da802", "sighting_of_ref": "indicator--2ffdf078-52df-420e-ad6a-cd405c57c115", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1816bc-c565-49b6-8ce5-2b7fb658c2f4", "sighting_of_ref": "indicator--ce878dad-e4b1-4c3f-a63e-2acf7d4d05dc", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9174e0b-d691-4d23-b44a-4192b1f9ed69", "sighting_of_ref": "indicator--8544ff24-2a97-4915-a236-37681fcf2723", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de951979-b85f-462a-bb1f-d176e6d1a15e", "sighting_of_ref": "indicator--b88bc9f2-f2ff-4823-9660-539dfd45395a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae7f1ac-f170-4a0a-bf37-0c7a140ae98a", "sighting_of_ref": "indicator--b8adbb37-680b-47c6-b9e3-b5c8e418bb45", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e7527d-0cb5-49da-9ed8-426f47a89237", "sighting_of_ref": "indicator--db0ba368-5f65-4fed-8db2-016285b2b729", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248ac8b9-8049-497e-92bc-15a61d1232f4", "sighting_of_ref": "indicator--8911dad1-0ab7-4228-927a-76c74aed00ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d05ccac-bb06-4319-a05f-1fbda77649ad", "sighting_of_ref": "indicator--9ea1125e-b9ba-496d-88c8-83b7547634e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e4be19-9c09-45a5-9420-abd4c9b82042", "sighting_of_ref": "indicator--124160fd-ad3f-4493-95f1-a2a54c937d46", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9230ed2a-1e4a-4bdd-860d-b2b0492bbba9", "sighting_of_ref": "indicator--a020e4bc-10b8-4a25-bd3d-9e5eb00b388f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69cb940b-d0ae-482c-b78f-d8642f47a8ca", "sighting_of_ref": "indicator--c9f0ea8c-4def-429d-a418-103401c51de4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc7fd32-a90a-476c-ae0b-2e90e5bcd36b", "sighting_of_ref": "indicator--a21f5519-a0ca-431b-ae57-99c5f8661044", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154723ca-cc44-4c2f-ac43-df35454e4dbe", "sighting_of_ref": "indicator--08f4e063-21c1-4729-b827-71f5c2ceb62b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa5fc06-afe4-4c85-b7a2-b5c719359681", "sighting_of_ref": "indicator--221fd4e0-5651-45e7-8b12-113568394875", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2550910-88f0-4734-b2ee-4eb86472f3c2", "sighting_of_ref": "indicator--f6a89e73-cb24-4e5d-ad30-54872e96816d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ea4d22-2c96-4f30-a998-b690830d0898", "sighting_of_ref": "indicator--8a1026ce-b04c-478b-9c16-3172a77aa7ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d43f975-83bd-43d3-80ba-c83505fae955", "sighting_of_ref": "indicator--0b3aa77e-0b58-4ec6-8f1b-8cb646cd90ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dee4c4-e513-47ea-b079-4eb37c16e4f3", "sighting_of_ref": "indicator--031a04d9-bb92-428c-95c1-244a820bdfde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f6a45e-8af5-4dad-9507-6aa0daaed4b8", "sighting_of_ref": "indicator--469efe62-4e18-460d-96b6-7726b75b3839", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5400d473-56f4-4c07-bb80-dfa918d672b4", "sighting_of_ref": "indicator--efac0b35-a367-46eb-99c4-cef00d6b8e52", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05616466-bfba-4a2f-9f2f-75cc15d80107", "sighting_of_ref": "indicator--f41952b5-f554-4e17-a9ae-5cfa262e3f18", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc5085f-1dac-4cfb-9ddc-ad1ee8b85bcf", "sighting_of_ref": "indicator--10ed6864-1bc2-4dcd-b4e1-9ec9fe6e7518", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b0b09c-b79d-4017-a8ed-b74a88aa15c5", "sighting_of_ref": "indicator--23293689-1b38-49df-9894-fe2b82ebe6f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3af5a62-9837-4023-b543-3118f76a51c6", "sighting_of_ref": "indicator--515e0bdb-7812-45b5-b809-063e993fa987", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9440a3be-47d3-410c-83d4-29afa39f5147", "sighting_of_ref": "indicator--490c25e9-a4fa-4529-ab26-0da1912fd22e", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3665c1-90ad-4154-9bba-d2f2387c0765", "sighting_of_ref": "indicator--f6a5975d-e2e8-4ca9-a38a-df79c6f262a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141151bf-af99-4701-b78b-a5b0222ccb4b", "sighting_of_ref": "indicator--1a7bc031-e380-48db-8168-3d40d457caf0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624af156-be30-4b6b-b9a0-027f46bf9005", "sighting_of_ref": "indicator--fd675e36-acfa-4874-aa97-b354ae1c01c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd5ba65-c256-44fd-9c00-c7362e8e62d5", "sighting_of_ref": "indicator--6de1a668-0846-4e36-bb94-15380ed3d6f8", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ccf9a3-c497-45e8-b4c8-5a8bed913084", "sighting_of_ref": "indicator--a11e35b2-2548-40fd-88e6-222917a8610f", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f484d69c-cd4c-49d5-b8f5-6f204de9e1c3", "sighting_of_ref": "indicator--66dbfb6e-7248-4217-ba65-9a71bfc2c202", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e81ce3cc-9e89-434e-ba29-9d9dddd4a563", "sighting_of_ref": "indicator--fb76cd88-c185-4124-8ef3-3aa1d9aecd81", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fbaa07-b3da-438e-b2f0-19ee021e27f6", "sighting_of_ref": "indicator--523af7a4-107c-4616-8837-d78c0ad66da7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce00d70f-286a-41a1-a517-7f659d91c2a1", "sighting_of_ref": "indicator--028d08af-0411-4ccf-88a1-939a25aec475", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df4c705b-c21b-4b43-8f1f-9c10720f77e0", "sighting_of_ref": "indicator--cd28aaad-7cb8-437f-aa1a-6550c56e0629", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f15506c-026e-40c3-8925-3b194c28b871", "sighting_of_ref": "indicator--b7f9bec0-9849-4ae2-9cda-c91f4472b9dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90aa9ec8-8594-4a5c-a3f1-768ac0c316ae", "sighting_of_ref": "indicator--54736ea7-d21c-4fc3-91e1-b4a2fcc291ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80eaf084-213b-4a0e-bbc7-856147a9ef33", "sighting_of_ref": "indicator--1d8479ed-7843-4975-8ee0-7867364bbaf7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cc32df-44c6-494c-bbd9-5da715919736", "sighting_of_ref": "indicator--fdb74047-a8f9-43fe-ac5e-e79c7519fdc9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a6fcb6-2ce2-448e-bf4e-b5e0ea44901a", "sighting_of_ref": "indicator--e08f7f3d-2eff-42c5-b1a0-5801034136fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b85ac7-0ea3-4b89-bbbe-955d7799b4ed", "sighting_of_ref": "indicator--375e059b-744d-43ef-b3d3-753232c73602", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faa289d-30d6-42ab-8889-99131be93527", "sighting_of_ref": "indicator--e50dd7ba-2ef4-4045-b66f-def6f1a231d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4263d3b8-00da-4f3f-a461-9f931a6dfff2", "sighting_of_ref": "indicator--d1c79229-fcbd-45dc-ba07-1b559fa6722f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9530af87-e2bd-4f8b-a87f-b093b307b4d3", "sighting_of_ref": "indicator--e35b25bf-2d41-40d1-8fb2-e64669cad6f4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03df1f1-5ed3-4d75-9726-8b58d063c745", "sighting_of_ref": "indicator--5b13131a-10c1-4536-8d10-c8e36eae2f30", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9929de15-0e75-4feb-884d-6c1ae91565a9", "sighting_of_ref": "indicator--816e673b-6f1f-4c6c-97bc-a1d53252fd11", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e7b9ff-4a01-49e0-8ef0-a2b4755bb694", "sighting_of_ref": "indicator--be7d42fc-0076-40c4-bdee-7c7970ba4fd1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ef7b8f-4e34-4fda-8978-412c8546b303", "sighting_of_ref": "indicator--ae9790bb-310f-4476-abcd-28bfe7bc3aec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acfea94-f187-42b7-ab0b-83b598b935d4", "sighting_of_ref": "indicator--c4ee744b-54af-4e5b-b9f3-874fa113c21a", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e34a3c-b7a1-4d3c-bc62-8f536a77742d", "sighting_of_ref": "indicator--dd83bc5b-8b26-4a1f-9854-89e47101c08e", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--649ce4f4-57f8-4bb8-9206-368a93a35a3e", "sighting_of_ref": "indicator--26227904-a981-412b-8e61-1aef411fa210", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68576688-43c7-4448-bcf8-41605cc299df", "sighting_of_ref": "indicator--b27e55e3-b4f9-4117-84d4-ffa112f1d774", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8534a5e4-39cf-4108-b1d5-d1d5123a919b", "sighting_of_ref": "indicator--27f15904-53fb-4dbb-ad45-c352e1e56b7e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa20fb7-627f-4f1d-ae6e-eb78e23295ab", "sighting_of_ref": "indicator--69339a48-3abc-4d9a-8291-8cd2ad644a57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7903f488-af11-43fb-b71d-d51bdc7bb69b", "sighting_of_ref": "indicator--baa99de8-0376-4d31-8e71-2a96673677db", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd3a313-97e1-4a10-b3da-575533335ed9", "sighting_of_ref": "indicator--fb1846b2-7731-49e7-987b-f801882a16d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408bcc53-4b41-4ffb-bff4-a275ed031f44", "sighting_of_ref": "indicator--ee5ab446-0c78-45f2-8e56-3d3d9c64074e", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08c88fe-ac7f-40e1-b72c-ad6be5e24c69", "sighting_of_ref": "indicator--036af249-68f6-4094-9e04-143e0cd71af0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53df5a0-6d78-455e-91c3-286ef2181804", "sighting_of_ref": "indicator--4de4dc88-9b8c-4e8e-a795-09287106413f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36711a0-5632-4496-a6ec-6cacc20b9903", "sighting_of_ref": "indicator--1cf5f592-772b-4e4f-8282-fa47351ad008", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a76aa86-3e3f-40c2-bf0e-c1d769eaa772", "sighting_of_ref": "indicator--11e1ac4b-97c9-4672-af27-3f777b035762", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c295b189-80aa-483e-9924-17a11d5a6e31", "sighting_of_ref": "indicator--23fb315d-297f-4615-8034-be7d7be877c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b267117-7431-465c-b47d-f7a3c8c5d05f", "sighting_of_ref": "indicator--fb03a738-960c-4fd6-bcd7-c1052fce54ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c954a902-2e0b-4f4c-9408-5b23ab395481", "sighting_of_ref": "indicator--4bb8166e-7436-44f4-9a00-191b8e1f45c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d39c657-da33-4e24-9a38-02291f576656", "sighting_of_ref": "indicator--9bdd00fd-2ea0-44a7-92fc-fa874b869f7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bd14588-9d34-41bf-905f-1f8b42029968", "sighting_of_ref": "indicator--7247339c-1fe3-4ad1-a19c-ac2bd2cda2d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd135b7-38e8-4335-adf9-82075dd9f892", "sighting_of_ref": "indicator--e8875d7d-aa36-4bb3-aed3-e14029d77007", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11aabf2-8ec1-40ed-860e-7051590327d3", "sighting_of_ref": "indicator--f351e469-ec01-4e7b-86b7-21564550596f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ae1d76-4456-4b18-bcbd-90beba6ec8bf", "sighting_of_ref": "indicator--b31eab84-fd92-40b9-9911-fcdf0814a937", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18a77ac-5fe9-454b-ad8a-cb4f6919ac95", "sighting_of_ref": "indicator--ff03092a-17f6-4025-9157-83908ff7eca5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb928ff-51ed-44b5-bbe9-779495def50f", "sighting_of_ref": "indicator--934c9b35-f1f9-4fdc-ae2f-e7e87af6dd9e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a278cd-f23a-46ff-abba-aeb346c116c9", "sighting_of_ref": "indicator--8f3cc41c-57e2-45bc-8ecd-98bbc300ffcd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb6a028b-7c16-4fb4-b0a6-99b813fe1db2", "sighting_of_ref": "indicator--2e155f82-75c5-4167-858c-e006d180df54", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99681520-9668-413b-9f5f-b9a82a3e4582", "sighting_of_ref": "indicator--03b1e978-6676-445c-a08f-1ec64d3b1841", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f859a875-adbb-4f08-aff8-fc6f40146a16", "sighting_of_ref": "indicator--92baf02f-94d9-4750-b1c5-f402fb88ed2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3ba092-15a1-415f-baef-a17cae9f9cd1", "sighting_of_ref": "indicator--2c4ebb60-c9b4-474f-b88c-986dcce2204f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5057f297-8262-4b8b-9bd6-e1f74d7603ee", "sighting_of_ref": "indicator--31a97576-9ce2-4959-b811-521f6f14662c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a440e08-34e5-4295-a4d6-bb2815e354bb", "sighting_of_ref": "indicator--18010869-fe92-435a-9654-9b5604028a24", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e861c2c4-0ee9-4e8e-81d1-1ad195a563bc", "sighting_of_ref": "indicator--03dcb057-dda5-4f10-8f29-221e329d23e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1678de7e-1792-4089-a057-7a90472e1057", "sighting_of_ref": "indicator--25b4b923-3c73-42fc-8798-27fb5a468abe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d993e42-23fb-4c6c-8112-583a76bd0f42", "sighting_of_ref": "indicator--98de4d9a-5c6b-43e8-9183-d932091dec35", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dfb18a-1f13-477f-ba55-b583621316e7", "sighting_of_ref": "indicator--4ce269af-8b10-4f40-af67-79c38a52521a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469d7925-7fc5-41c1-98c9-48542d9565b2", "sighting_of_ref": "indicator--414fc92a-1bb8-4ca9-bbbd-1cd9ad95bd4b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7177313-01c8-4a3d-8759-90fc5462aea6", "sighting_of_ref": "indicator--2b686cc0-f2da-4801-93e6-ee73c7ea13e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309ee671-4b07-43f5-8572-be717788a877", "sighting_of_ref": "indicator--2f567afe-b5c5-41de-b8ea-907008b09e09", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6e8fe2-4861-4106-b5cd-df72cb370ad5", "sighting_of_ref": "indicator--4bc7f466-635e-47de-841c-b7ebdc158da8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783580da-7d19-4686-8930-145edfd4b4df", "sighting_of_ref": "indicator--2fccacff-9099-4b47-ac41-50dc27d83c5f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f02d428-656e-4041-bd72-6dcd9da23cba", "sighting_of_ref": "indicator--f656271e-eb42-4a0b-af03-2c9849a85993", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9133bd1e-a749-46d6-9ede-8fda9290ce2c", "sighting_of_ref": "indicator--e70585e1-0167-48c2-93db-6e95859bcc1f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab25452a-9fec-42e9-a483-36d5e9966379", "sighting_of_ref": "indicator--28dcbcc9-f534-4e1d-a720-754bde9e0fa8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd15798-fea9-4a21-ae62-90f765cd51a4", "sighting_of_ref": "indicator--a4aba5b3-36be-4927-91aa-2c1b19e97422", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fbc044-814d-400b-b274-8ef4a757db79", "sighting_of_ref": "indicator--6a46933e-f78d-417c-bba5-d1c6c65498fe", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a041af2-5bfa-49a6-95e3-da0679ae66d5", "sighting_of_ref": "indicator--457ef912-3b4c-4066-b617-3f70688e1baa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82c81bc-8c70-4321-b996-c1b26daa60e5", "sighting_of_ref": "indicator--97b26104-96e2-49a2-885f-2c0c0590f060", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2be280-275d-46dc-9ccd-1d03b125f63c", "sighting_of_ref": "indicator--1d0a7b99-b971-493e-ad99-f8b0e99403c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0378ae9-72a3-47bb-a1c3-17f407adcff3", "sighting_of_ref": "indicator--08f11d9a-ed60-46f6-a10c-2b1064c44a02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d3b4cd-5b83-468f-b2bb-9878e6c017d3", "sighting_of_ref": "indicator--3bdcbee7-329a-4176-81a7-8c56d3056347", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4104d6ff-5dad-4f1a-959b-efede1faf82f", "sighting_of_ref": "indicator--19b7b391-d69a-46b3-8fd6-777a210db1a3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1e0409-3cfd-4ebd-99f8-11c204e4e540", "sighting_of_ref": "indicator--5ab84dda-c9f9-4d96-913b-9f9e8bfc66d9", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdccae5-3eef-4d12-b54d-bb29d20c8670", "sighting_of_ref": "indicator--6c825e2f-b26b-4f35-82c6-42009ea77552", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a244bfd-668c-4797-9981-55e0fb558322", "sighting_of_ref": "indicator--a8aadab8-ba50-4ca4-8853-45d61ab3e1cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa177ae-c1eb-4767-86fe-165ea7f561ef", "sighting_of_ref": "indicator--fa8bbedb-7ce8-4572-8311-34cdbf340876", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f59b5d6-a397-4d80-b508-c3f1f4adf063", "sighting_of_ref": "indicator--6f2e8001-bfd4-4a2b-a020-fcf644adf10e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e25371ac-9536-455a-8a7e-2fdeaaec2a09", "sighting_of_ref": "indicator--2c2a61c3-8d7c-46ea-9e8d-eab2212d33fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41054047-9c64-46d1-a7be-3096ae2b6051", "sighting_of_ref": "indicator--fbbc5e9d-a722-4a89-bfbb-716e2fcd1b1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0674c5ee-5543-4c78-a8b1-7fce4b51aadf", "sighting_of_ref": "indicator--f7e548c1-f856-4eb1-bcb9-486aa771b753", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c45bf11-6763-4531-83ab-6c752c3cf13c", "sighting_of_ref": "indicator--84e8a3a2-92f7-4f51-8e72-1cadabd3d1b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09455af1-7980-40c4-a0af-0cc1ec0bb158", "sighting_of_ref": "indicator--69555d15-7b35-4807-8d7e-b167b08d1fc2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7269749-690c-453f-a13a-5136846f4860", "sighting_of_ref": "indicator--0d20d36c-a652-466e-826f-ea821844f256", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ecfe24-4e5b-4ec4-9484-34918c773664", "sighting_of_ref": "indicator--0491301b-247f-4c11-a587-9fca0bfbd7e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79072199-e2b0-4031-b12e-048e17816561", "sighting_of_ref": "indicator--e60904b0-f1e8-43af-8610-3a94a1142c75", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61495219-8980-464b-899d-c326f1277058", "sighting_of_ref": "indicator--4368130b-e204-4161-9d9b-5a618c5e1121", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ffb045-83aa-47a6-b6a6-c17e705e40e2", "sighting_of_ref": "indicator--a6f883bd-fcfe-4798-8580-6acff5e9a217", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e262e5c1-f680-4fe8-b55f-a0031e16e950", "sighting_of_ref": "indicator--ff425265-78a8-4220-9bf8-12accbf6c3c6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d2850b-c7f4-4de3-9fba-1c2b74392e87", "sighting_of_ref": "indicator--9c27f7d1-c844-4a4c-91dd-9fd2baa4d5d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755c1b47-72b2-4d9f-bb42-82ee623a718a", "sighting_of_ref": "indicator--1b7261b2-bd03-41dc-b16c-874f0d777c55", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c80972d-7246-4876-9266-626f12536f4d", "sighting_of_ref": "indicator--1c5a4e05-3360-4472-aa4b-6fdeac212e0b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf6ad71-557b-43fe-b324-4f6b1a211e2d", "sighting_of_ref": "indicator--5d1bb8cd-d09e-4468-b95a-1c0cc1dbc23b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e909e2-8186-4936-967e-bfec459b55bc", "sighting_of_ref": "indicator--c4040427-fe29-45f2-83b3-e1c2a03c043a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06d6af2-0847-4314-a76d-4572e07ab832", "sighting_of_ref": "indicator--2946278a-1e51-4e5c-9741-292b4016ff3d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e03468-fb2a-4b32-b943-c68bd6531aa3", "sighting_of_ref": "indicator--9f0448a5-ee6c-44aa-9fee-c898d8148705", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01454af-e21f-4fe9-8548-fb6b4a5cd96f", "sighting_of_ref": "indicator--c2991c52-447e-41a5-b9d2-102e475081cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac4bb2e-d118-4775-9f18-526ea8dd046d", "sighting_of_ref": "indicator--4bf14ab6-a1a1-4ae5-b28a-b044683938c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c884e9-c01a-4ea7-a059-3ebcf9b8aa0f", "sighting_of_ref": "indicator--b4f96511-60ae-4207-8471-f2965c6b84e1", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929b153b-e950-4cb1-b5eb-410ac1f7c906", "sighting_of_ref": "indicator--b4f96511-60ae-4207-8471-f2965c6b84e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4587391-f5b1-4508-8f04-429b6bd27ba5", "sighting_of_ref": "indicator--c6bc699a-3001-4335-9179-305683e8738b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a22be10-a34f-4d70-abfa-6fece0a43370", "sighting_of_ref": "indicator--223fa5f2-0972-4fd8-8f80-95ceb409dfed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a8ba25-2da9-43d5-9f98-a2b1b5fa341c", "sighting_of_ref": "indicator--de74297c-778f-415e-9842-74530f15fff8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be443acd-81d6-461f-b3f5-2d35803be952", "sighting_of_ref": "indicator--3e4d5b1f-4655-43ef-a879-1c84b212d837", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd927a3-8846-427b-85d2-08f8dd920980", "sighting_of_ref": "indicator--c6744432-5b49-4608-b240-e1773419e0e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7228b846-b78a-472e-b020-6d89b643212b", "sighting_of_ref": "indicator--068cf640-ec0d-478c-bcce-6501e9479e14", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763e02cf-e1d6-4a0f-8636-194bbcf83631", "sighting_of_ref": "indicator--aaa71ef7-f5f2-4ad8-b304-88e5d6a64ac0", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9656333d-940d-492f-b6fe-85457e82808a", "sighting_of_ref": "indicator--b10fedd3-83f5-4ce3-b91e-70d704e213f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--061b8705-94d9-4ca3-8cd2-db0cefec15f6", "sighting_of_ref": "indicator--2b89eca8-ff81-4d3a-8a5c-14f6de64cc48", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730d5aa6-8956-47c6-9f4f-a4b6665db7a3", "sighting_of_ref": "indicator--cc6d04b4-b192-48b0-92ae-03cf3be2e4e6", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191b9def-7b70-4ae9-9c77-2be6f5d94322", "sighting_of_ref": "indicator--01e8880d-9165-47f1-ba55-97886d7e1f62", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa4c853-960f-477c-ba3c-e26cb8818c24", "sighting_of_ref": "indicator--e5709a30-f7f0-482b-8c9d-b22959e9a8c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b06a12f-f4e1-4224-a7a4-1a73c9e747a1", "sighting_of_ref": "indicator--675e1b49-497d-4c67-9598-f7b798b0c9e9", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0393f4c3-5031-434f-bc09-c533a0a7789a", "sighting_of_ref": "indicator--ba9bdc4a-54ea-4d5b-9e2c-8c15c7fb55d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea0b766-e883-4f4c-99ef-55d7bfc6997c", "sighting_of_ref": "indicator--6b9bd67a-4cd3-429d-a37b-2c704b59207d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6021108-c42b-400b-a03a-af7cf62c85b1", "sighting_of_ref": "indicator--e4e0800f-a2a0-4a1e-9215-4a29814eda11", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801e73e7-09a8-417e-b666-5e270bfdd52c", "sighting_of_ref": "indicator--dbf1b39a-8501-4ac2-9c43-aad5220b837d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21862ae5-2a79-4b5e-a6ec-cc99c6663fe2", "sighting_of_ref": "indicator--a2797351-3c03-4909-9a82-4a918cec0f67", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb41950-1d0c-47ea-908b-de80cf8d76d5", "sighting_of_ref": "indicator--28511c8a-20d8-45c6-8bc2-d6c9bf66d9d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be56bf1-2bc0-497c-8858-b596a51c01af", "sighting_of_ref": "indicator--f21077ba-f593-441e-bcad-16df4d4e4154", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa7573a-1db8-4bee-9e73-472b6ab0f691", "sighting_of_ref": "indicator--547cba6c-90e2-4635-8578-e2a0fed26531", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4acb26-753c-4401-a330-abe6919164b5", "sighting_of_ref": "indicator--6ac616ef-f144-4308-98a5-d8f85abbac06", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c757496-6346-4b50-a980-aaf8d7e9bc23", "sighting_of_ref": "indicator--eaf9ee65-e650-4deb-bc3b-9ec270aad858", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c0d80f-14ba-45ee-815f-90fbb9c1fff9", "sighting_of_ref": "indicator--aeeaf0c5-2dca-471f-867b-8e36f34983cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d136adea-4fb3-49c3-b6f3-4a9c8a4fd0fc", "sighting_of_ref": "indicator--d456253d-03e5-48d4-8024-d7f5affb9711", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47a0217-fd21-41e3-9a75-9e71a6ec8f18", "sighting_of_ref": "indicator--ad458838-3671-4804-a8c0-778081c3fd90", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2628128-c6f0-4f05-b89a-b5b996828069", "sighting_of_ref": "indicator--2b96c8a6-4c53-463d-8290-a96ebd0ec7a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e79d03-1e2a-48c2-bef5-5ac90e35ae79", "sighting_of_ref": "indicator--cb047f9b-ad4f-4a51-b0dd-ea7fb6b0e766", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3030c4b-c861-400c-8cee-7fa892be634a", "sighting_of_ref": "indicator--9075d022-c114-477a-bd7c-a8f8b987f5d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af2ff28-1df2-4cb3-830f-de8289e62661", "sighting_of_ref": "indicator--e72d5b29-dfda-47e9-8198-c3b65637831d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e3994d-775f-4125-9902-cf712f825141", "sighting_of_ref": "indicator--43e81c53-c57d-48b3-8b24-a77afd79f5c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5875e94c-a3ef-43b7-8599-3076a2b8dc82", "sighting_of_ref": "indicator--7f1d1c29-cefa-41b6-9ddc-133c12fec192", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662bef37-e46b-469d-883c-6903fc786152", "sighting_of_ref": "indicator--a16bd585-c1e5-45a4-b115-aef5b5ffba18", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431be2f3-9086-4d2c-beb5-818fe563be7e", "sighting_of_ref": "indicator--9ff0f7c0-3311-4a5c-ae7d-ae47582422f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3737fdd-26f5-4ffb-a739-55efd2a26566", "sighting_of_ref": "indicator--d09b5caf-496c-445b-b9a2-cec14ab91d43", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586008c1-ec3d-4d28-b71b-1834024de077", "sighting_of_ref": "indicator--9320ecf1-d54b-4a23-94c8-e6e55728f6f1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb0203c-a7c3-4ae2-a4f9-81578542233d", "sighting_of_ref": "indicator--413b4aa3-ab08-449d-8c0e-03b5daed961a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41214cf-789a-4959-9dd5-d50d7c7a2ae5", "sighting_of_ref": "indicator--d47af845-7a5e-412e-aa4f-b2a60a4cfc82", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0f14a3-373d-4843-b78e-4f162436af86", "sighting_of_ref": "indicator--16c84ab6-66a8-4e8f-85d8-902f3a430a58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8aa137-833b-4bb6-bcb5-a493d89422a5", "sighting_of_ref": "indicator--6a74c546-8e14-4dd4-828a-6100dcbc0465", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bbdb84-6768-481f-a052-37754288ebc2", "sighting_of_ref": "indicator--ee40ebf2-3599-4918-aa03-818715905467", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7556ca54-c9ea-40bf-8d5f-4373cecec8c1", "sighting_of_ref": "indicator--a41e1219-6e2f-40fa-ac33-ca4e805b6696", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc73887-45f9-4738-9ca5-30098e13d830", "sighting_of_ref": "indicator--e032e782-39de-49ba-8457-0373e61effc8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e17e9d-d10f-46e4-81c7-b78db7b0f104", "sighting_of_ref": "indicator--84fe0d60-88ba-42df-a0a2-b662a4ed583c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771df416-f242-4cff-9afc-2f2d449f214b", "sighting_of_ref": "indicator--270d482d-741f-4c6f-8a18-489bd9275e6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2bf3a7-3671-48cf-a936-6a6586cbde20", "sighting_of_ref": "indicator--9649b8ba-3ace-41cf-bffc-d6c81b7419ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef4c156-2a77-4864-a952-2fd46343bc07", "sighting_of_ref": "indicator--d09801b6-4f48-4b71-b8d3-bb684f0f9a3b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72094cbb-1142-4bcd-ad75-78c5186ae80b", "sighting_of_ref": "indicator--7d520185-2f33-49d1-9192-983e078ab250", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40650432-f132-41e1-ae03-119f15aa81da", "sighting_of_ref": "indicator--a685cef8-20b7-45eb-912c-46cef573c413", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc15329e-38e0-4fa9-b8f0-95e7f5a0d463", "sighting_of_ref": "indicator--5e6d2b50-168f-4c43-a4a8-a5e0cb4616bb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a691e63-b724-4281-97a4-99eda9d30cfe", "sighting_of_ref": "indicator--77fb06b9-b866-4c4e-adbe-c026c47ca98f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6966dcae-3139-413d-a9d4-1baa92567f00", "sighting_of_ref": "indicator--857db731-096d-48c1-8b19-74fce98bfcc5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c410ab90-9a8c-46ce-95c8-808a5421a49a", "sighting_of_ref": "indicator--8ac5ab3c-219b-401d-87cd-42e84e5b5e57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13eba22d-bbf3-4726-83e0-8024e0cff0ca", "sighting_of_ref": "indicator--f53efa79-04ce-4a8c-89f0-de983635d726", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22148d0-831c-4e3b-8401-eebfe3f9fdfe", "sighting_of_ref": "indicator--a050ddac-17f4-4ad0-99cb-9a134b6d1d2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4e55ccf-4981-46fe-b76e-60fb41991ea4", "sighting_of_ref": "indicator--15e8e5a8-5e2d-46f8-ae2b-a5c4f391f7e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf46a11-6e60-4d7f-9c10-09acf174e723", "sighting_of_ref": "indicator--a97b2c94-db3c-4078-8ff9-3eb7f53b76b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409738c7-33bf-4a48-8311-a18c2c933ab9", "sighting_of_ref": "indicator--6b8f6f29-bea9-47fd-adfe-5d4c86e2ea80", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8a7052-41c5-49cb-8a98-c7bc4f9c454b", "sighting_of_ref": "indicator--14badb18-761c-45d9-95b3-9485c56b9377", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f2c329-4d0d-43bd-9b82-bd64b81676e1", "sighting_of_ref": "indicator--eea8b139-25e1-46fe-a88b-782ca2e32a4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2d0e94-d0fc-4678-bf89-4c98cc8fe10c", "sighting_of_ref": "indicator--bb39c369-e707-487e-982d-4f098d9c2a05", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4453a4-5548-4530-90a9-4fa35f09b03e", "sighting_of_ref": "indicator--c84d239a-b359-4dde-8cc4-71db15fb259d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2710e4d-813b-496f-a72e-26457b466290", "sighting_of_ref": "indicator--93ca82e5-e4e6-4090-b248-d8f13ffd2046", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0682f5-dceb-402e-a47a-6e6ff82af7bb", "sighting_of_ref": "indicator--769e6f92-95c4-440e-beef-abf19a748a26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc04e37-8fbc-4036-8cf5-50b5ff0dde18", "sighting_of_ref": "indicator--caa6ad64-ab91-4699-8d12-52c6c29f8f55", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56618a9d-49d2-485c-8517-bcff78e139dc", "sighting_of_ref": "indicator--cba2af18-df78-4b79-a48b-a99a775bfab5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd26223-b150-4751-973c-2b508443dca7", "sighting_of_ref": "indicator--f4026dd8-d2c3-4a8c-8267-10ae617612f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f11e089-5dd0-4ed2-bab2-eb5f488a4178", "sighting_of_ref": "indicator--ca793ecb-23ad-432e-883e-ef00666dd3ce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2294ad56-94fd-4230-b50d-52d6927b96ae", "sighting_of_ref": "indicator--99f6313f-9a69-4e84-b02f-51132bcb0af5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a98208-b383-46af-affa-270f2c08fc7f", "sighting_of_ref": "indicator--30782c63-e214-445c-93f0-efa7bc98bede", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05e866e-3851-45bd-b36a-bbea48f29b83", "sighting_of_ref": "indicator--dc3b3e2a-ab0e-4b87-b21a-a4722c752010", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31bdf749-4b5d-420c-b931-a0ac4dbe7643", "sighting_of_ref": "indicator--101fa4b1-fd07-4602-986f-8e92251644ce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c226629e-f5b8-4dfa-a3ea-6b8d76b2e28d", "sighting_of_ref": "indicator--14ded9ed-9f10-40ae-812e-cac934e1a0be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bbcf87-17b0-4859-a47c-879ce06ee18f", "sighting_of_ref": "indicator--2e3f0968-b027-4bdc-8b22-ecc9c01578d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a3baf8-5eba-4a3a-a019-c44d0dc5ffda", "sighting_of_ref": "indicator--6a80942f-9dae-4ade-80ba-45d9902e7955", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747caae4-1c70-444e-9539-79d400709328", "sighting_of_ref": "indicator--89a8f8b7-4769-4b10-a6b4-704449dbf6f9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996458a9-9db8-4582-a24b-feaf9036c2b0", "sighting_of_ref": "indicator--1d15e8b0-3b26-4441-8666-69d8c1db3888", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e80a4dd-2988-47c4-bd2f-9e3e585ccf77", "sighting_of_ref": "indicator--5687f12f-a39a-4418-af8a-aaf059a45a9b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c00d639-25c4-488a-a879-bcebf36f796d", "sighting_of_ref": "indicator--75cdab42-5838-4b9c-8d33-1a1ad92dcc9f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21997d06-6d24-4f46-81dd-8730f838a2f7", "sighting_of_ref": "indicator--66d0417b-d349-4394-986f-28f240d60772", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a28d80-984b-4eca-8f18-ae69d7eae8d3", "sighting_of_ref": "indicator--d304c261-bf72-4045-a70d-ce80508cc035", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657e9506-67fc-4058-b8aa-dc724d24c94c", "sighting_of_ref": "indicator--9337fc4b-a0a4-49eb-aa85-2bcc39d48fdf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02128c4-863e-4096-a8b1-cb54d985c1b3", "sighting_of_ref": "indicator--0444fbc6-1908-4410-9e99-088d2626cfb0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623aee18-cea7-4e7f-8909-8f7bcee3a89b", "sighting_of_ref": "indicator--a5882714-72e4-4013-81fa-c531f5d9baa5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673a0073-7398-4b41-a461-707c6ae3dd5a", "sighting_of_ref": "indicator--d86c067d-03ec-4b14-9347-bd2e42a7e771", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4ed9ecc-e6ae-4a70-bd67-d15a60b05ae6", "sighting_of_ref": "indicator--9ca8331c-868d-4fd9-8b14-64918718d3b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d6d672-5998-4b42-86a7-e38374bfee31", "sighting_of_ref": "indicator--86adcc06-6c4a-4f97-becb-6bf30eb9c213", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44601dd-2080-4503-9447-979c06278543", "sighting_of_ref": "indicator--7e7b8969-2caf-489f-a47b-2a5e3cae3493", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bc4fb9-5a2c-4978-8c1f-07045d3d3df3", "sighting_of_ref": "indicator--5d8ea124-35f9-4047-a36f-517ea4843d5e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f681d099-b81c-4ee3-a53a-5d09d1ae732e", "sighting_of_ref": "indicator--809ca871-e84e-4c19-8817-a50a4ad9427d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7489c15-447c-4e88-927a-b19c28401731", "sighting_of_ref": "indicator--bcf4c9f4-4536-4509-a0ed-530885c37d17", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32754fe9-bced-47f4-bd43-10b3b0f42cfa", "sighting_of_ref": "indicator--876e11b0-43d9-45ea-8ac8-47b9b2eafa0c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f751c3-b0af-48fd-9293-ec21568cd5e2", "sighting_of_ref": "indicator--19197511-d37e-4c6d-87f0-85a43e15fd28", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ee6fb8-6674-4234-b4ef-51f10ed554b1", "sighting_of_ref": "indicator--55c77fdd-4df0-425c-8b9c-c767241ca488", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2311addf-7659-4525-95cd-28d3506ff8b8", "sighting_of_ref": "indicator--892e28b8-46cc-412f-a04f-0e625770b6d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bed3be5-457b-478d-bca0-8b515965052e", "sighting_of_ref": "indicator--52f76d1e-c9d3-4233-a231-54ea94d107ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40814fc8-6ef8-450f-9dd3-36128e816a47", "sighting_of_ref": "indicator--c8f22b9a-f3b6-42ae-b99a-911852728269", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57841418-db0f-4179-af19-904e6ffe29a3", "sighting_of_ref": "indicator--65351d7d-54ad-4bd9-b17a-b2b2a1e92f6f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bea728-2ea9-45b2-9150-59ad91c402bf", "sighting_of_ref": "indicator--8fba699a-ef41-4a69-aa2e-11913479348c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d624d3-0a14-4704-b601-f851f8c4264b", "sighting_of_ref": "indicator--6ec00eda-1392-4b61-94c7-21546f14c598", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aece1e91-5be3-41fd-8c28-ed04f880dab2", "sighting_of_ref": "indicator--239d0c46-dee5-4c79-a5f6-8b6faccf753f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cbfc33-0dc7-431b-adf3-39a39f1e1905", "sighting_of_ref": "indicator--aa028733-b1bb-4b94-a0a1-c06f734312fe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3908c41b-8b4a-47cf-819d-a69c8b3348a3", "sighting_of_ref": "indicator--f3b5df93-aced-4ee3-bb49-7926d0b796e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1018299-35e5-4037-b385-1380dc649967", "sighting_of_ref": "indicator--cd0e2d31-d4cd-4128-af6d-77253027cec1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98197534-9504-431f-be76-96902a5471b8", "sighting_of_ref": "indicator--193b7848-9eae-4557-8e53-ab6ea227fcdd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d3ffd3-5583-4c2b-bc17-f6674e70565d", "sighting_of_ref": "indicator--177e3d45-0ee7-4291-bd4e-98f701ae962b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa4b3225-7ff7-47c6-920c-e42144ebb328", "sighting_of_ref": "indicator--37a652ed-2c2a-4725-9249-1e74a3b7e5fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8c2fce-9021-46c0-a908-d7433be90212", "sighting_of_ref": "indicator--b203e02b-840d-4344-b134-bbc5edf127e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af25ec38-fb51-46a3-b1aa-5259faed5680", "sighting_of_ref": "indicator--3b4d6ed0-6510-409d-b866-4b3106034e7d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814893e5-c436-442b-8e72-7401d76a2f7d", "sighting_of_ref": "indicator--501e0ba6-7929-4663-9bb1-734d165aee8f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f9b0ba-61eb-4f0d-920f-8a37c165939a", "sighting_of_ref": "indicator--efb83e07-3cec-48bf-91bb-89cd7433e81b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c663ddf-68b3-45a6-b56c-d01f3d1dbf79", "sighting_of_ref": "indicator--935cd10c-c9c8-4f97-9f82-672730fe1e5c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3603f15a-1705-459e-83b3-d9f33e33ec98", "sighting_of_ref": "indicator--57c2d0d0-868c-4d7b-8725-777efc3416b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6959e0d1-66ff-4351-a2e0-e043e8bda96e", "sighting_of_ref": "indicator--943fddc3-952c-424c-a6b4-55eace934cd1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde4141b-0f92-451e-8147-68482e1c733b", "sighting_of_ref": "indicator--51507f36-7c81-4f85-a93e-9962440fcf41", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba9318e-d42c-4f34-91e9-291fa1a69d08", "sighting_of_ref": "indicator--d434b0ed-5e96-4d34-b0e2-fb465cc64544", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c327b2a9-5779-4ba8-869c-7531b9a8126a", "sighting_of_ref": "indicator--942acf04-2764-4d56-8fef-b3aa957aea49", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f612354c-b3ec-4197-b6b0-9a702c7da533", "sighting_of_ref": "indicator--3305bead-915f-4dc0-bc69-274c5924840e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ef34d1-7e16-4e45-ad45-8ca9409783f3", "sighting_of_ref": "indicator--7eaf245e-9f98-4685-8447-2b857234562b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23466602-05e9-4c3c-8ba2-57ba2c7e3111", "sighting_of_ref": "indicator--6c3ea577-4dbf-4ab3-a7bb-282ebfad7a3f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057aeff8-1107-44dd-bf03-e4c3fc15996a", "sighting_of_ref": "indicator--7f4b44ab-24b9-481a-8515-94608bd61204", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6844c3a-5e30-4530-949f-ec68766730c4", "sighting_of_ref": "indicator--b583ead0-e139-460e-b2b3-3a2321d5e2e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd635b4-3546-4955-af8a-e4f8a717c5e9", "sighting_of_ref": "indicator--7670ed23-f102-4ece-81ba-886815032cde", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91469180-8643-4130-b047-8dab238c30eb", "sighting_of_ref": "indicator--e458b3db-bd1f-40a0-9328-33e7f88f1b26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45bc41c-a089-4f16-a40b-61ce8b18a537", "sighting_of_ref": "indicator--ec544faf-ebde-42cb-b61f-023607193789", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887e7dd5-74d1-4872-866f-23e879acb52c", "sighting_of_ref": "indicator--5b726401-54b1-4c97-ad36-c9d22f167be4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65aad90c-a693-4394-b294-63e169f66634", "sighting_of_ref": "indicator--222e8a10-35fe-453b-a21a-99ce93cb646f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5aff97d-74b8-46b7-8707-34868e1f96b2", "sighting_of_ref": "indicator--03fe56c3-c251-43a9-92d6-a0fb36d489a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce50aaed-4e84-4dfc-8bc4-4bf94937034d", "sighting_of_ref": "indicator--c45df864-27bf-42e5-9d89-9f282a5852c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dcb6636-722b-4206-b053-2a41879055fe", "sighting_of_ref": "indicator--a291fe99-56bf-413b-983d-8a3efb18bdc2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88848c9-52d1-4a75-8f8f-5b88a0236c44", "sighting_of_ref": "indicator--dc4f87f8-6569-4b24-9e44-dbbef23833aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07baf97-f063-4e04-8c4f-390591b23bf6", "sighting_of_ref": "indicator--bba3f827-e4f5-44c4-8603-ab88310c3919", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1274aa-b002-4227-9b53-db08947ccfb0", "sighting_of_ref": "indicator--af835ba4-8cb1-4c8b-8d43-ed835dc93837", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c133d95-1ada-4d5f-bcf2-275dabcc74b8", "sighting_of_ref": "indicator--750138a9-9e99-4bbc-a79b-a5f12bf90170", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f34dcf-7aa4-4fb2-adac-e3d0608780d8", "sighting_of_ref": "indicator--2d86edf7-e566-4bba-86be-99dc8bf47d3e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf2b30a-43be-48b9-b1e8-1a427cf32a8c", "sighting_of_ref": "indicator--9975d828-85cd-46ef-8e32-a55fb3047f1b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d78e5de-1b65-4690-9d7e-25f0bce96930", "sighting_of_ref": "indicator--66e96bf1-f5fb-4869-8dc8-1a72352fefb5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1a388d-29d6-4510-8be7-9b5ed627dd9d", "sighting_of_ref": "indicator--7dfc2623-b359-4af9-9ccb-a0811485086d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cb6b05-a0f5-48e0-8348-2b9b42934f03", "sighting_of_ref": "indicator--e66de5ad-20ac-4f82-95c1-0aabf64b199e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc4a2ae-9799-4bcd-a6a9-8c67211cd9e9", "sighting_of_ref": "indicator--9fb1eb4a-3202-4529-9753-8868e9be2e1d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dd8739-0db8-46c9-8e57-ef031d40cf31", "sighting_of_ref": "indicator--14cc7dae-fa9b-4b78-ad5d-94972c761a20", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2593fba8-0e5f-4949-898d-4fc6a5d4d185", "sighting_of_ref": "indicator--40d03f43-7f84-40cd-844b-1579d1db4635", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df4f813-54bd-46e8-97a8-acfd51a0faf5", "sighting_of_ref": "indicator--0b3ae63a-a746-44cb-b0df-d2e7590762d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c633d3a2-5e74-4b23-8f28-62986d6f5599", "sighting_of_ref": "indicator--a2baa657-ad4b-4da8-a6c2-7a0e908d7294", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbcd59c-9f0d-403b-8a3e-02124be68a00", "sighting_of_ref": "indicator--baec246a-6dd7-4511-8165-aff4f72a64c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c487324-f761-494c-89e2-4d36cc32e69b", "sighting_of_ref": "indicator--479fe27a-a09c-4caf-82e3-22ad84a66250", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d87a232-a596-4ed6-901f-7a62d6a288c4", "sighting_of_ref": "indicator--63320503-cfd1-4d9e-b017-136e3c818e5a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba18307e-a8a6-494b-86a5-0fff7221e551", "sighting_of_ref": "indicator--41085ebc-5020-4deb-9be2-0f4ff88843e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c02658c3-047d-4596-8ac3-e4755a1957d2", "sighting_of_ref": "indicator--776874de-a671-41c4-aed9-0c4a15720539", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d858eb-0a92-47c9-9af2-3e746f28abf8", "sighting_of_ref": "indicator--ca8c5d1a-5a14-494e-a4fd-5484c6b42fb3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7e1c53-255b-4201-be2c-65a8da481a3c", "sighting_of_ref": "indicator--2a3cb951-a7d1-4851-888a-cf55ed1559f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597e45b5-b644-4abc-9a90-9ec1ec5fc162", "sighting_of_ref": "indicator--eb23e3a7-a558-4a30-bb28-315541429d91", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95e321b-7a82-4cac-93db-f19aa18d8d9c", "sighting_of_ref": "indicator--74c874d4-9a41-4d5e-8782-e3482a621b56", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cce3cc7-6450-4ff9-af05-044b0d5a57f0", "sighting_of_ref": "indicator--afe3e0ef-3c9a-44b3-ba59-a74fb30b429c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d228dd-7796-483b-a6b1-bd92bf9c995c", "sighting_of_ref": "indicator--a453ca9d-4068-4f8f-94d6-6b45a9b5312c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77535830-8b40-4000-ab24-894678caaa16", "sighting_of_ref": "indicator--ff8951a4-da9a-4767-968b-356952ff0282", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7d1ab8-bedb-4bc0-81d3-06f8f8ac1473", "sighting_of_ref": "indicator--8786905f-1b44-443f-b8bb-0e4f793273ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3195a67-9001-412b-9409-b98a66281658", "sighting_of_ref": "indicator--a7051d5c-a31c-4502-aff0-6e7b01b17d45", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a29bb4-965a-4277-acbf-7fe7f22641f3", "sighting_of_ref": "indicator--abe663e6-8a5c-4efd-9708-65bc6ed5c584", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0209162c-b38a-4b2f-97d4-51890d5ee17b", "sighting_of_ref": "indicator--13e03382-c500-49b9-8225-04706b287a0b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb815ac-ab9b-4234-ac3c-47045659f4fd", "sighting_of_ref": "indicator--376a1ceb-c6a7-4ca2-8f0f-07ee483f36b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a0db90-2b2c-4f8c-95ea-26bba84c0797", "sighting_of_ref": "indicator--4c9adc14-4c6a-4c8e-bf04-7b4e3179d2a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f0501f-d2e0-4caf-b408-fa563ba627c5", "sighting_of_ref": "indicator--97c01021-c203-4b12-825a-58ddad64d6b4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8762fee1-01d7-4a01-b13a-ffb89e20aec6", "sighting_of_ref": "indicator--639c9855-7e89-4925-b8b6-a37e247affc7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c797f15-1da5-402f-ad95-9721cf431f38", "sighting_of_ref": "indicator--1ac8c353-8e8a-48c3-8b05-98382889bd6d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fb39fe-ead5-4aaf-b82d-5d64653baa97", "sighting_of_ref": "indicator--b3e37e8b-74b5-4b38-9250-035d05f15e8c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c58246-25cb-4da1-82e2-aed79e652f11", "sighting_of_ref": "indicator--f434213c-258d-4de0-9b9b-6143a38ca9ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d863d5-5c60-455c-958f-9e304b3223e8", "sighting_of_ref": "indicator--52a6e416-57af-441b-80e9-2333f0a3030a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a856827-83fc-4e39-8f13-36caab58ff3d", "sighting_of_ref": "indicator--27a14274-1a18-414e-aa5b-1eaf0ebf2409", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950993ec-5c8c-4269-8e0d-bdb2ad526659", "sighting_of_ref": "indicator--8fcc6359-d206-4b84-9d33-416da18a0a7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe28d0ef-b973-4eb6-a54b-fb6b36bdbfc7", "sighting_of_ref": "indicator--abf722b9-0dbc-47f2-a65e-df5c29f915d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0abb6cb-3042-42cc-8707-feb250f5dcca", "sighting_of_ref": "indicator--83c6b85f-efed-4cce-a30f-9c9b3d1e9133", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed1c27d-b960-49fe-879b-9746cd4b7ab7", "sighting_of_ref": "indicator--2a49024e-0b33-4141-8e04-d04ee3921bbd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5231268a-4403-4fc4-8cd1-8d9c644d8b19", "sighting_of_ref": "indicator--116066f5-a6e4-4eb0-b8d5-f6c221b95b98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df5e882-5c30-4da4-9abb-6b319fde559c", "sighting_of_ref": "indicator--171b1418-9183-4827-b673-bdcb8015805c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc82037-b2f6-4228-81f9-42c72cb34a8a", "sighting_of_ref": "indicator--eed05f14-3e79-411b-9a59-3ae13b3fe14b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaecdc4a-979d-4080-afbc-1f8c75f5419c", "sighting_of_ref": "indicator--5e4da5d4-11e8-4615-8c24-dd0471f93e9d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490af2e9-e25d-4a36-8f3a-0a453010f6e2", "sighting_of_ref": "indicator--681a6078-d2d9-47b0-911c-dee7759fe634", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2f1936-e359-4982-bb74-d3cc0b18746e", "sighting_of_ref": "indicator--3c323497-649e-4670-bc7f-30cf8109cc90", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc692a4-a27a-4c32-9b6d-a04971510bd8", "sighting_of_ref": "indicator--ff83b352-a225-48fb-b97c-53d57e94547d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd440729-c01e-4161-9152-97d961bcd013", "sighting_of_ref": "indicator--0118cccc-f321-4bac-afe5-306478475ac5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83f6a06-6cb9-400e-af00-3b2b2896cf81", "sighting_of_ref": "indicator--44e1e209-dcba-4e0a-91d0-be193ab5f953", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a0e385-e322-4657-b138-6c9d57ba7fd7", "sighting_of_ref": "indicator--56002adb-368c-4f66-b2a3-7848e83894e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be71103-b3ff-4158-9fa5-70b2b118fa89", "sighting_of_ref": "indicator--dafbeab2-3c5f-41ff-a03c-33266ae3ca07", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff916bfe-3bd2-4eb9-96f0-2daa4677b530", "sighting_of_ref": "indicator--deb2a9cf-8330-4115-bffc-593c719b0843", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb028d2e-1599-406c-8ea0-0c9c2a440708", "sighting_of_ref": "indicator--f7af83d7-3134-4d0e-bb3f-dd3d0f907c74", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cba8be0-0d17-4c98-b1de-3e502d1c2bc2", "sighting_of_ref": "indicator--b5c62efe-8a77-4baf-b0a9-8ff4b226c153", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d524dfa-6f53-4147-8cc1-c2bdad094ae1", "sighting_of_ref": "indicator--498c1719-5f2e-4ffc-b07a-a27561ee0535", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12adb352-9ce8-43a0-8846-2af8f1a6b207", "sighting_of_ref": "indicator--465b9335-b7b8-4261-b45d-e0dbaf34743f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fae33d4-f1b3-4bcf-adc1-acdebece93d9", "sighting_of_ref": "indicator--3a7710d5-43e9-409f-bd59-586f9b43a015", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45984369-11fa-4351-afe2-e669f9592ff8", "sighting_of_ref": "indicator--71d23802-5237-4904-a08d-1d2db8a852d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef8b604-496f-4754-8d1a-aeae47b51729", "sighting_of_ref": "indicator--0a9e8a46-dafc-466b-a1cc-fdceb44b6f81", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28caaa7e-28b2-46cf-9b6e-bb6e7080ae4a", "sighting_of_ref": "indicator--b949b925-c376-4906-8b51-cafa9aa8dd83", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fbdd08-9a25-47c4-80ca-10aaf6512f0c", "sighting_of_ref": "indicator--99dabafe-5be1-480e-a419-9d817ee2a352", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24505ee8-4e06-48b6-ba50-3ae8b4457488", "sighting_of_ref": "indicator--be46c5be-de18-4ba0-b228-526c26e6855a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de26932-ba61-446d-8b40-bc158f95de9e", "sighting_of_ref": "indicator--ddd04234-b31b-49ba-a8c1-ddd5c529e633", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0dd1feb-8d5e-415b-9466-7bf1c98bd4e4", "sighting_of_ref": "indicator--dcd43b35-1dad-46ce-ba98-109fa16e40a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be83494c-91ff-4bed-9e10-c07e2a818063", "sighting_of_ref": "indicator--b032ec88-6fa6-46cc-a2ab-72a69ef839b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e59669-ff80-4a57-924f-c2beedb8271a", "sighting_of_ref": "indicator--5e20dafc-7877-497c-bc92-7c3e835c45f4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e92ba2-885c-4388-bb7c-e68c03857890", "sighting_of_ref": "indicator--c93d6305-56ba-4946-8769-b079ded73e29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7fe0ac-d148-4ff6-ab4a-a46bfcee907e", "sighting_of_ref": "indicator--d744e717-64c8-4aa5-a04a-4a283e5e9652", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6871f1bd-e201-4cdc-957a-e5e86e057f1b", "sighting_of_ref": "indicator--02a3c437-9f43-4fc4-8ab0-d126fadf4ee3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60adae44-d91b-4d08-a96f-d37aaddf20d1", "sighting_of_ref": "indicator--4d77d4e4-f654-44ff-bc79-4178f8f37c35", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d4d89f-d6eb-41d8-8ac5-e7abaa9200b5", "sighting_of_ref": "indicator--a0ca8c7b-3078-41b8-95a7-34e5fdaf990e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c2d35f-0aa4-423c-9825-b9dfaaee79ee", "sighting_of_ref": "indicator--2d37bed3-fbb3-4c1e-bb7c-61b556f9b983", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d925ea2-6f9c-49ae-9ccb-cb4c0c636a16", "sighting_of_ref": "indicator--9589c4e6-1811-4793-8453-9880df784f20", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155a7296-e72d-46d0-913a-61990006e092", "sighting_of_ref": "indicator--0d905148-3b2b-4fb7-a06e-d3a1ba518867", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e922946-770c-40b6-96fc-df81df2fbb9d", "sighting_of_ref": "indicator--037f0650-6f42-48ea-96b8-639f98a0ba65", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a15f6d-b482-4c7a-bd8c-dd7c80e2cc6a", "sighting_of_ref": "indicator--5b94b553-42d4-4d0c-93b8-bf09c0320394", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8825ab8c-7f68-48c1-ba73-437b3aaf3aab", "sighting_of_ref": "indicator--ee677bde-456d-4ebc-8a79-e6c44eeff259", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5f2149-8a2d-48ed-bd5a-308a6e966744", "sighting_of_ref": "indicator--db7afafd-9a17-4cea-99a3-bb0f867ed916", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfef311-95d0-40c9-ab9e-ab447c1c62fc", "sighting_of_ref": "indicator--888d9020-de01-4099-a482-ca5296fdb92b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa43d55e-817e-42f5-991c-f8b612fcfbd0", "sighting_of_ref": "indicator--2d6c9163-a0b9-4dd8-b305-0f783b7a1a6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0809bc95-0273-4f55-bfff-24f52c009d68", "sighting_of_ref": "indicator--895f683c-6006-4a11-b6ce-01e5ec45510c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b1f836-bb27-4aa2-93ba-5478787d2370", "sighting_of_ref": "indicator--cf6fb3ae-4686-4739-b9aa-cbc69ac4f5f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fd3649-9e23-47d3-834e-d9e74ab3eacd", "sighting_of_ref": "indicator--6ec2a30d-2dd7-41c6-890f-3b1010db1d54", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d233b3-7411-4c11-a326-0f99374aa04c", "sighting_of_ref": "indicator--f71b2502-6e2f-4dc3-a3f9-40aebf3981e3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8285a363-786d-4dfa-8d94-5ae127287ca2", "sighting_of_ref": "indicator--0c3dfad3-89e8-4827-843d-7df09b003e81", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e69dc2-b80d-46da-8763-b773a31faa4b", "sighting_of_ref": "indicator--39b86df2-915d-433b-98df-ea43b939ffd5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6b051a-c612-418c-82d0-00e47f2f5443", "sighting_of_ref": "indicator--69a9c2fb-a126-4cf2-842b-ce49cfd57d09", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b87479-3cd7-4c47-8999-e3c42322341d", "sighting_of_ref": "indicator--268c17b5-b89a-4659-85ad-f3103d4f0190", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f097e14d-d192-4a6e-85a5-f8b0970a9298", "sighting_of_ref": "indicator--de6a7e21-1c67-43d6-984e-6ce9a5eccfb8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--710382ca-941b-4d86-9add-7b24fea810a7", "sighting_of_ref": "indicator--88e51d9b-697e-4672-8ef1-71b80409271a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbf34b0-840d-4317-ac54-dac9f0b08d1e", "sighting_of_ref": "indicator--e8d8bf2f-48af-40f2-81d0-015e0f517cc1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe9c2cd-04fa-40b2-964e-ec035c75d1d3", "sighting_of_ref": "indicator--b5b3d473-1cdc-47ca-804f-43a810c5b46b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0d83c9-dd93-4762-8f8e-b751549c21f2", "sighting_of_ref": "indicator--f1e8b0d4-4652-4439-a7e4-c0d27dc266c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7effc88b-0074-4829-b839-c93689b014b5", "sighting_of_ref": "indicator--9479bdc8-a4cd-48ff-9db3-48778543f074", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194a35ca-15ff-4113-b398-cc0218bb5ae1", "sighting_of_ref": "indicator--968769fa-a77f-431a-8b33-a4e9f6301466", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e72db07-cc4a-49f4-ab2d-ed87734c123a", "sighting_of_ref": "indicator--57973a36-f174-4ad2-96c7-1f9c8b95ea78", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316e4e26-29e1-4df7-924f-4d8e6c28e05f", "sighting_of_ref": "indicator--3436911d-d445-428c-ae23-45f283c5632a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5db48f-8b48-4dfa-8487-66a493408cb9", "sighting_of_ref": "indicator--cff44f91-5469-4c4e-bc3e-b27d1502165b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8ca101-ef30-4380-aae3-9917f8a48ef0", "sighting_of_ref": "indicator--d169c45e-79c8-4e4d-82ce-07ad75243488", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e29925-a97c-47c0-8cbe-db3cbb17e09c", "sighting_of_ref": "indicator--a25113e1-2e88-4ee6-b30b-0127f80fd56a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb03b818-3e29-465d-b531-33cbf498a516", "sighting_of_ref": "indicator--d05eee36-b8de-4bed-975c-c59a7c2ce749", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5972b2e6-cb3d-4e22-8b2c-84191811f3d0", "sighting_of_ref": "indicator--f79d24db-8838-48a4-9b7a-ede7a3deb7bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a1468a-7855-44d5-a802-0baf2c76ae33", "sighting_of_ref": "indicator--bcb16204-7fe7-4d68-93f8-473dcc27868c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bc789c-cb53-411d-920e-d09301ffe89e", "sighting_of_ref": "indicator--fe668d62-fa6e-451e-b113-65990854c1d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea58960-e5ae-4df6-8534-9a3f080b6b32", "sighting_of_ref": "indicator--c3127ca8-9833-4e11-8282-9dc9f4c96747", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877372a6-f7cf-4b37-ab72-5bddf0847f55", "sighting_of_ref": "indicator--be9ca15d-8eed-4d45-b255-237d7f136967", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765e3769-de95-40c5-a3c2-e0b0a94c14d9", "sighting_of_ref": "indicator--f052683c-8c43-4df2-9eae-75ebb381af9b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264a1eae-fc77-40d4-bc47-e58d478295fa", "sighting_of_ref": "indicator--92001529-3aca-4289-8fb0-cc4167dd498f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d59c4d6-877f-41f5-a8d9-18e05a711623", "sighting_of_ref": "indicator--641a642f-2178-4568-a884-fddd22ad1e77", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb70b39b-666e-4b40-b88c-fa2cf2251968", "sighting_of_ref": "indicator--780d0b7c-d989-43a9-8576-f583b6433626", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d35efec-ac14-4ffb-882f-24361b5208c6", "sighting_of_ref": "indicator--af422175-266b-4c99-94e3-8a8f6d411918", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5b9646-fe1b-4adb-b487-4aa0d4b9d88b", "sighting_of_ref": "indicator--4d1e1d92-4e9c-49e5-b741-cd817699feb5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d68497-4790-44cf-bb8f-d9de05c7dcb9", "sighting_of_ref": "indicator--a7474a93-ab97-4f2d-98fe-d8fbf36b8403", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07a8bb7-234f-478f-9817-873da2026ef5", "sighting_of_ref": "indicator--333a5c4a-0e43-4820-9d47-4df188c4850b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb57136-1e60-4f3b-a64c-923de9bc6340", "sighting_of_ref": "indicator--23cad2d1-70b8-4cac-99a7-bfbd03f50917", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d80cd1b-7bfd-430b-a8f8-d64e6ea0743b", "sighting_of_ref": "indicator--c880cec3-280d-4f02-85f0-d82077ce6b98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d408df-ce4f-4e42-9d89-32fa03c5b203", "sighting_of_ref": "indicator--219528d4-39b1-4edb-b8a2-d5c0fac6d2bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fb6363-e355-467b-94ef-8581f794c262", "sighting_of_ref": "indicator--ed6212f1-312f-45c2-8730-04d59645e60b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1b2326-820a-44d4-8a29-1c2ecae0054f", "sighting_of_ref": "indicator--f7b40276-aa0c-4c54-83e3-09468a0c0586", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac5dd94-e787-4acf-85fa-8f787875bacf", "sighting_of_ref": "indicator--c58578b2-ba75-45f0-9105-a972074932bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc97842a-3915-4141-8fd6-bdd9ea830966", "sighting_of_ref": "indicator--313f1027-0674-4f3b-baf7-11341b59e763", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d769ec67-678f-4bb4-955d-75f7bd4ea10c", "sighting_of_ref": "indicator--e594f6ca-32e9-4711-b730-643347eff5b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57670407-a7a5-4d88-a485-b482aff0e380", "sighting_of_ref": "indicator--201a2243-4019-43b1-b46d-76a805047caa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8f2d0c3-dcb2-4e39-874e-d9ad67cfb15e", "sighting_of_ref": "indicator--c6e1bf78-3528-4a59-87db-1b0a91f72893", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1034bf60-809c-4135-bf3a-dd503c6b29c4", "sighting_of_ref": "indicator--ae217c4f-6952-4842-b1cd-4db94f4e1e98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63ff557-f0e3-48b9-baa6-7a5f5c4a83ef", "sighting_of_ref": "indicator--ae6a6353-d9f2-4279-af4a-5acf496e668a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bf7603-a0bd-4010-b10d-3d4a3b4fa25f", "sighting_of_ref": "indicator--8099a84a-e5b4-47fc-8b0d-2f91062ef60d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83296999-a9e6-4b67-8178-b1b088226506", "sighting_of_ref": "indicator--5e1dc84b-22cc-423c-b429-bf5ffb4304a3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f60b66-acd8-419d-bb68-2073a9862920", "sighting_of_ref": "indicator--caf7e4e7-a3f8-4c3d-b535-463e5b425945", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528f52cd-9cf5-4827-a8c5-12131bcb1ef1", "sighting_of_ref": "indicator--fc8bf966-1c21-4530-b63b-386850869b04", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a78d3548-7faa-4486-a08f-9887c751a6ee", "sighting_of_ref": "indicator--0673f983-ed36-486b-9d74-3aad8bdea805", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9f3b00-7ec1-4193-a6ef-cdfa0f7e860d", "sighting_of_ref": "indicator--fd8677af-fab1-4f56-8204-b9370deb9c98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9cbd36c-2dfa-49e3-b1ea-c8b195a502b7", "sighting_of_ref": "indicator--e44fad2e-43ed-46dd-90cf-0ac957a22f10", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4a19cd-4f97-41e1-a445-35905973dbc8", "sighting_of_ref": "indicator--35f42eae-9934-413c-930b-ac5a178889cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a377fc-f99b-42fa-88ab-daf5b31ebbcc", "sighting_of_ref": "indicator--628987fc-5427-4577-8d7c-df21349d969d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bedfde77-869b-40b1-9aa2-e1e4f97e3cda", "sighting_of_ref": "indicator--834b9fef-fb41-4f97-862e-bb528d436374", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b973f1-753a-4ed8-b020-9f1e9686d3d8", "sighting_of_ref": "indicator--796d6a9f-5a88-41a3-acfb-40c2578353bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5eff2f6-2d57-4bfd-8303-d0547dce59d9", "sighting_of_ref": "indicator--42353b75-95c1-4032-b0a7-d5cb40731e8d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b317253-b87e-4e0c-bfbf-60d2368658ee", "sighting_of_ref": "indicator--bf0a60d3-9ae3-43d3-adc0-262d3e1247ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16f38a1-c3a2-4125-942f-fbf5ed2e0a1a", "sighting_of_ref": "indicator--7caf8570-73c8-439c-9054-e8e599a7c716", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1898bca-a3af-4bbe-9b03-44fb682d665a", "sighting_of_ref": "indicator--19ceae32-45b5-4e29-baba-5e6f1526f291", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794a8583-d598-452a-a6b8-c955e73ff965", "sighting_of_ref": "indicator--fb70a31d-57b6-45a6-bf88-fea2732a1f45", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cecd83-9078-42ca-8217-4458aa7d3d23", "sighting_of_ref": "indicator--65a921fa-91e0-49a6-8f4e-fa5fd2648f98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07342d6-8a03-403f-a0fb-d7bde0506d93", "sighting_of_ref": "indicator--ceefc9ed-46e3-472d-b0eb-9e5df8205ca9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c09f7f-5a67-4bd6-9243-74e8966d060c", "sighting_of_ref": "indicator--59b05940-690f-4fbd-a906-2fc58dcf6dd8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cd2b1b-0826-4cf9-871b-cbef14d534d7", "sighting_of_ref": "indicator--8dcced27-357a-453a-8eed-678c860aa04d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b17a18b-6500-48af-9946-4e411bda9a06", "sighting_of_ref": "indicator--eb193a93-46f9-43bc-9e7c-06c87bb09650", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769b1aca-9d9b-49d5-8ca9-c543e1e3c052", "sighting_of_ref": "indicator--1fe0b757-c1e0-462b-8947-05ef3203d104", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--491310b5-17f2-4637-833a-607aed9ac64b", "sighting_of_ref": "indicator--aded9115-e135-40d7-a42f-05900d70c4cc", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08df8d9-bf1b-4239-9783-052cb02ebd58", "sighting_of_ref": "indicator--eb42d666-0794-4662-b599-ebab60382ffc", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b110113-cda3-4ed3-9687-348c0b258fd4", "sighting_of_ref": "indicator--375be313-d2f9-4c71-b750-32ef3880a4a2", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c466c8af-203f-4c1d-95e8-5f4944498a9e", "sighting_of_ref": "indicator--2074823f-9f14-4829-ac5c-db01b1ee1d39", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb5241b-8d60-4e86-b0ea-f131934085a0", "sighting_of_ref": "indicator--554cd04b-6190-4dc7-b962-8d2375014470", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7542d79-38b5-4ff1-bd29-d0c916e7680b", "sighting_of_ref": "indicator--5c0f0441-2dca-4833-a86d-578dc657bbdf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a5bf70-719a-41d2-84d6-cea2f7013a2a", "sighting_of_ref": "indicator--b88060df-496f-479a-a975-d50cc680333d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4161b76a-4184-4729-ab9d-e300f9f6c6d4", "sighting_of_ref": "indicator--7631f9d7-4c51-4389-9389-174ab54c57a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd88c95-6476-4543-a547-ca2cacc343e8", "sighting_of_ref": "indicator--c1fae81d-d227-46c1-aadc-41ece3414619", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f43b76-fbbf-46c9-9250-0d9bbefa019d", "sighting_of_ref": "indicator--0daf52ed-32eb-495d-85ba-f04301f97c6b", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a98b7d-d5ba-4952-9331-11cb668f7e5a", "sighting_of_ref": "indicator--99848550-a1f6-44ad-a072-f6757787fc4a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515e282b-43f9-4b16-b31a-75c589a73461", "sighting_of_ref": "indicator--7ba33900-039b-4a39-9643-ddacd17a7ccf", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d432c7e8-88b5-45b2-9ee4-c595356bb527", "sighting_of_ref": "indicator--0e89703f-72c1-42d3-97f8-fe368b7374df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b237571-8edb-432a-8808-54206cabc523", "sighting_of_ref": "indicator--5aba2037-0926-458a-9ad4-7d2a3ebebf57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d218b69c-d1fd-4a27-8ebe-ee0c85bfe376", "sighting_of_ref": "indicator--6cdd6be1-f203-47fd-9612-9420ecabcfb9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a96d17-936c-4da5-b88d-7aebe1131782", "sighting_of_ref": "indicator--9b959d65-091b-4a9d-90c8-15ebc5dac15b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e365755d-2d0b-44ca-869f-21b789b25443", "sighting_of_ref": "indicator--cb35f70f-7393-49fb-924a-60b91d445d5d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3a7f2c5-60fa-4fcb-8af6-85c6a62d8b14", "sighting_of_ref": "indicator--39689222-59cd-48ee-a254-d2c46420a78c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32f3a12-5504-4056-b0c5-4d9091f4cc0d", "sighting_of_ref": "indicator--a2561f2c-ea0e-4368-bbf6-506c60913cee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abc1286d-93c2-4747-b03b-8931563ac5d6", "sighting_of_ref": "indicator--2174e2a0-1fa6-4297-8244-06a0e8a1ed39", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8719c95d-9c69-46e5-a971-b9f94c19b4f8", "sighting_of_ref": "indicator--9c998fa9-9d27-4e72-8327-9cbbaefbffe1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4785085-f0cd-45b9-bd81-a9b9b1bdb90c", "sighting_of_ref": "indicator--ae305c96-b050-45eb-93c7-75660841a37d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeafad89-435d-419b-af01-f77183a59faf", "sighting_of_ref": "indicator--bea939bc-da82-4648-9170-16b349ef6ae0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5c4add-f7b8-4779-86ca-bd44676a7a9b", "sighting_of_ref": "indicator--c96dc5f4-2eec-4b55-9999-f6688e1aa467", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd0cc0a0-a539-4a2f-9391-38bdc9090de2", "sighting_of_ref": "indicator--fc01b638-5bb9-455e-a320-2438bab81a5e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f90111f0-69e5-473a-b989-b9180c35591a", "sighting_of_ref": "indicator--da826cf4-cc14-4331-867b-44c625c142a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507ac918-a1ac-4f00-9cb1-9914e5a5b7b9", "sighting_of_ref": "indicator--7c483373-3399-4f9c-8e9d-fa7a7af162a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05fd9bf-80b1-478b-a0ab-da96b2e511b0", "sighting_of_ref": "indicator--1c48b7c8-fdb5-403e-ac4c-15b9ce6235a2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a0466f-8a9c-468b-901f-8f86731c9f61", "sighting_of_ref": "indicator--8f8da5d8-0c60-46fd-aebd-5d940181f54e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a040357f-e55b-45f7-9f5e-1eb8b0caf95f", "sighting_of_ref": "indicator--11dfda32-7762-4808-bb64-c7274e011694", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511b89bb-71a8-4647-9593-7340f8d35eb5", "sighting_of_ref": "indicator--d3164886-723d-4621-9c9c-f96e91554c6e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba387ba8-c180-487c-89b9-982ca4e7499c", "sighting_of_ref": "indicator--17aafb1e-c0ec-47d9-810b-1400df2466a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4b19bd-f4bf-4c5b-82fe-028d667a3013", "sighting_of_ref": "indicator--34dcc26d-292e-4eff-b1a2-90d0a9066dbb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ef7fee-750e-44da-975b-95ff1d50cd49", "sighting_of_ref": "indicator--6c484040-7610-4011-a189-92e0239913a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edccf284-d4f8-4dcb-a75c-5450215be805", "sighting_of_ref": "indicator--5a80f9de-75a1-4872-afb8-c5007cc8a154", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d037a4-12b4-4e4e-a221-6ec29384f200", "sighting_of_ref": "indicator--eadb9f9e-770d-4751-bd3a-1c9b9c770c6c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6fa239-0e08-49e1-ab64-afe60adfd59e", "sighting_of_ref": "indicator--4a815e05-71de-45e3-bc01-68809a4fd295", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7009ee4-de52-47ca-ac3c-afec3c7df07c", "sighting_of_ref": "indicator--51427002-7c51-40b5-9dee-7ea00101b9fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82813833-a5a1-4e5c-8edc-6ffc948f477e", "sighting_of_ref": "indicator--57de9921-0e15-46ab-8f91-0fe518dfbfaa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953ba69c-e4a4-43d4-809a-683dd3729e61", "sighting_of_ref": "indicator--9d9454c3-1cdb-4150-bddc-a46bc7112069", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c0267d-92bc-4410-8ed0-708290b8c62c", "sighting_of_ref": "indicator--e08533b6-5fec-4029-beae-fd4119688047", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b242aa7-528c-4bc9-9163-4454cbe64ce1", "sighting_of_ref": "indicator--b075d8f1-0a97-4177-a676-81155d717869", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289147b4-db88-4442-a475-3eb75465ccb3", "sighting_of_ref": "indicator--4d892873-a408-4376-a2e5-1f536c34c39a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2edd6e8-dc5d-4f07-89ff-faaffd582d98", "sighting_of_ref": "indicator--5e153dc4-6e7c-4060-b771-418911c29360", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655bdbf7-a3b6-493e-a447-bfcffde5e61f", "sighting_of_ref": "indicator--16b18fd7-5380-4276-b817-605f106360cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a945e6be-f741-4731-85f7-b7385f729595", "sighting_of_ref": "indicator--eb6fdc3c-181e-4eea-aff6-a2e92142310d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938041aa-4ede-429d-ace4-be6e1e52203f", "sighting_of_ref": "indicator--22400880-c563-4a4b-888f-0cdd11c1c617", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c075f6-f377-4652-909a-88c54c3513da", "sighting_of_ref": "indicator--2ee3955d-e8ec-4589-b542-d5f693dd0bb5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9545e113-c69a-4e3c-be3f-fff971b58c12", "sighting_of_ref": "indicator--0e5405ed-4d42-4ad0-aa86-19dcf51f71b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46690d81-48a4-4177-afa4-e3e6b430d0ce", "sighting_of_ref": "indicator--380fd145-4662-4d23-80aa-ea5810a02e1b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ef7fcd-29ba-4e2a-ab7e-695d771fda5f", "sighting_of_ref": "indicator--effa397e-d234-4b74-a107-84c88bef8ad8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2d1a64-5eab-4c1b-a7f9-f9d4c891115b", "sighting_of_ref": "indicator--dd5bf089-600b-4b13-9e4c-3b87c10b56bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffeb0b90-f98d-41b1-9ac3-28454219b19c", "sighting_of_ref": "indicator--3e992b29-351a-4c1c-8526-7be40c3f6699", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ab1a14-8e2d-4609-acc5-5314d628be4d", "sighting_of_ref": "indicator--8c4c2970-88c5-4257-8799-47bd9ed444b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92514ee8-7844-49ec-89b2-982c79274874", "sighting_of_ref": "indicator--f1617624-71cc-4007-9c01-415564d88d5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e41d529-d674-4a31-9e40-921143af71ea", "sighting_of_ref": "indicator--2d62a3cd-e19e-4df4-8806-c6b0355ad68e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017bf674-0a28-4be6-bdfa-f21f888d3018", "sighting_of_ref": "indicator--43a369fd-81d4-489e-a9fe-4f81c26e4ba8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14cc7f80-5c3b-4b81-adbd-6e2105f32f5b", "sighting_of_ref": "indicator--0996f7d3-d10f-4629-bbcf-654d91937c93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e744e5-ad80-4009-9cde-06298db03c84", "sighting_of_ref": "indicator--550c0fd5-b608-4539-933f-56d09705503b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824f1ded-fa35-4208-ae6c-e1d91d5b5721", "sighting_of_ref": "indicator--843d1b3a-b55a-4192-ab9e-0c95c6f37157", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a47d49e7-6ddb-4b78-adff-d9ed3c6d1a93", "sighting_of_ref": "indicator--7e9a5124-d43c-4bf0-8a60-c679a1a927dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6436cf7-8754-4c1a-bad3-5cb4d578330f", "sighting_of_ref": "indicator--2a614f26-44d2-46a8-8f33-03704d46725d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1f693f-83e1-4b16-8d59-e32928c9e617", "sighting_of_ref": "indicator--49e8493d-7503-4a2c-bce8-5af2dc6c816b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b0d6c7-929f-453e-bc94-00b59417de4c", "sighting_of_ref": "indicator--aae0f144-114c-4bb3-ac05-bc6df9461ec0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897ff7da-4a58-43db-b94a-172793e15139", "sighting_of_ref": "indicator--6a9711c6-03ce-42e3-b168-0b665cca85dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed7bf63-30ac-4de3-b260-becdce5d5e3b", "sighting_of_ref": "indicator--674979f5-f288-4429-aec5-1c1a2a31d854", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500ca385-4c6b-48ae-b3b3-44cb5df4cfaf", "sighting_of_ref": "indicator--732791d9-4184-4a14-b9c5-58600407ca69", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9105334a-4f68-49e6-bc37-7db9602699cc", "sighting_of_ref": "indicator--a5fe676d-506e-4148-9424-f547af41337f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389dcaed-4892-498c-a0bd-4882870d6405", "sighting_of_ref": "indicator--7cc7d453-888f-4132-a669-cfd6080e392a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1332c0a-bf72-4f0d-b18a-e7704089d2a6", "sighting_of_ref": "indicator--df80761d-5874-49c3-a4db-250b1d49ed42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04044e82-aa7b-4509-9c93-b4155f198a50", "sighting_of_ref": "indicator--7964058e-6b81-41b9-9080-d06597fe0e78", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66a8575-547e-4fb8-a659-de37f29fc4f5", "sighting_of_ref": "indicator--6970e2e4-7618-4daa-ba97-2e4e6c83333e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19277bc8-a669-4bd1-8b3d-50ade7c640a8", "sighting_of_ref": "indicator--a3fabf70-f7e3-4e0e-be61-016e33f1fa40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99262410-6dbc-47c2-8d79-54e0eb852c65", "sighting_of_ref": "indicator--013be4f4-75ff-4a96-a700-4e847cbd0769", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34eac0b-159b-4592-b266-a135401c7c0f", "sighting_of_ref": "indicator--84e1e9ee-18b5-4d06-9984-4da8da79b72f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf2a64c-88f5-4f3a-a648-36de5ab0a390", "sighting_of_ref": "indicator--4567376e-08dd-46b6-8ee9-0f8bdc51a636", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023c9718-541d-4e1a-a00e-741c99ec578d", "sighting_of_ref": "indicator--d9346f0a-8bf6-4c22-8e47-65df16d094da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed357f4b-32b5-4a4a-be49-b46ff54f7f83", "sighting_of_ref": "indicator--c048e982-1869-406e-a7ae-e9a4529e07bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64077128-3225-40bc-b3cd-8e0a7a556fad", "sighting_of_ref": "indicator--94fdc5a5-c38d-4c1a-9053-5fbbe1308e9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f0c533-0bf3-4d64-9366-ba0aaf1a0808", "sighting_of_ref": "indicator--d26f2076-7d3c-4dc3-9876-1189cf8a0d93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2884b8-ffb7-42f8-b800-c2ec383e9b46", "sighting_of_ref": "indicator--5645fd30-c6e3-4348-88ed-745d6d9d7d0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e6cc5d-e6d9-4ef1-9f02-4798d38fe1dd", "sighting_of_ref": "indicator--417382f2-ec89-4466-ae57-84041a0d42a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2fd9d5-f8f0-4178-88b0-5c79c14ee8b4", "sighting_of_ref": "indicator--5b782d8a-64ec-407f-b2ea-12ffacdd140e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65500c2-1f7e-4ec1-a271-a6d93df5f774", "sighting_of_ref": "indicator--616e6e52-bd81-4fab-8f06-859a0009b82c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c123fded-6aa3-4845-b384-ffd6dc05a1e1", "sighting_of_ref": "indicator--cc447cd6-a72b-4e2b-8b13-1dd8c1301d34", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839b5429-92fd-488b-93ed-45b27f48ad5d", "sighting_of_ref": "indicator--000a1553-120d-4695-8005-cb2f754bbe76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a72bd2-aae8-40b8-9ea9-d71696e363e2", "sighting_of_ref": "indicator--e42a3ff7-5606-43d5-a94a-f9e60888facd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947f0674-8a6b-4d26-ba27-a50e3b46d720", "sighting_of_ref": "indicator--36f377b7-7d21-40df-8857-ec43d8de9e99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b497bef-8bbd-4fbc-8ca2-911fbf304246", "sighting_of_ref": "indicator--26e6c6be-6460-4913-90d4-59310c7a9f0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21dafba-bc45-4b43-bb6f-a1a2eebcb1e0", "sighting_of_ref": "indicator--9d00708f-a46a-4b61-a32e-7e78facbd9e2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5346ccd-6cfd-4533-89bc-3b1c244d6627", "sighting_of_ref": "indicator--44fd5607-bc70-422c-858d-8efaf388d690", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edbae10-b75d-4f36-857b-4c7cadd5a57e", "sighting_of_ref": "indicator--69056bbe-da12-49d3-b741-e92921d9c9a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8558c4-5d26-4b19-aab5-67a60f5eb794", "sighting_of_ref": "indicator--dba268f6-f419-4956-b2e8-54b128f1bf45", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dcf6ea-81df-40e9-95ea-ee338fc10d77", "sighting_of_ref": "indicator--af060755-fbcf-433b-ae8a-0b8d73c23ee9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aaea3f1-2ad5-4fe1-bf2b-d9a84f216676", "sighting_of_ref": "indicator--8b51c039-be7f-4204-9941-1e3669192dd8", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d742aeec-49c5-4909-8ae3-3d263c6d3a8b", "sighting_of_ref": "indicator--62e45ec7-6aa0-4930-ab36-915c0a8cac65", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fde42f-816a-433e-b129-035021f4e2ef", "sighting_of_ref": "indicator--ea762616-1443-4181-ae7f-67d2591c80a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189d949a-6f73-4a3b-9eb9-2633189b1aa0", "sighting_of_ref": "indicator--cb84bf61-cf11-44f6-81d3-512df90a558b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beec82ac-49eb-40eb-89ad-9ed3e0570784", "sighting_of_ref": "indicator--235eca6d-2dd5-4931-a049-a48da0b78364", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457c55a0-ac12-4a6f-a102-760e6a9da3cf", "sighting_of_ref": "indicator--854c7cd9-eff7-4aa0-89db-026cb039009a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f093a39-761f-4e31-9567-ae6a19b8a743", "sighting_of_ref": "indicator--3b8f6be4-f6ed-4ecc-bf2d-f277de0d2f69", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0ae7df-1d36-4f06-a334-26976ba867e2", "sighting_of_ref": "indicator--f51c4682-d7db-479f-aad8-d088dfe9a8ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62495420-1088-437b-9500-5c7765ac62cd", "sighting_of_ref": "indicator--a9b2d410-e569-461d-a914-cf70c210d472", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e3d989-caf8-4079-b65b-5d5d58123827", "sighting_of_ref": "indicator--73f55c0a-53ba-4f28-b286-b5f80fa9267c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54afac38-c665-47e9-947d-ecfeef4495e9", "sighting_of_ref": "indicator--333bf35a-39f6-449d-8586-8ebb141ca24e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfc3ba9-2587-4c02-b8b8-bd5fa25728de", "sighting_of_ref": "indicator--1a29cda6-7be7-4db4-89ec-bba4e2319ee0", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30cdaa6c-67c7-4a7c-9a4f-8e8f1a2052d0", "sighting_of_ref": "indicator--e20d9366-fb2c-4afc-a269-c793c3eddb69", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be60f0b-8dff-4019-bec0-803bf67fd431", "sighting_of_ref": "indicator--9d10ef71-bb28-4fd9-ac42-3d559b26911d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149f331c-7d10-4539-96ad-e15f7c53550f", "sighting_of_ref": "indicator--14489ecf-73f5-462a-a8ce-8ef64e43f464", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19e72946-1288-4bb8-af4b-89cbd2f24793", "sighting_of_ref": "indicator--33d8c21e-4600-4e8c-8d83-71e22fbe7469", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc3681d-b072-48dd-b715-1d39fd9fbba2", "sighting_of_ref": "indicator--0866e71e-8d3f-4d32-8013-82bd3dc32d2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55990fa5-920f-4756-9a5a-87fcd8c8bc13", "sighting_of_ref": "indicator--5dbd622e-b167-4564-b863-71d0cc33bafd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760b5f3f-fda3-46f4-8f91-9ef2c1915234", "sighting_of_ref": "indicator--89ff8a5d-9497-4f06-a5d9-2df29ab2fd5b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485b87ab-e91f-4723-9135-31b1b85bca6a", "sighting_of_ref": "indicator--92880231-b46e-4bb5-b858-a0d1fae76af6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03cde613-16eb-4a98-a5f4-eda728333c0b", "sighting_of_ref": "indicator--11ffcf2a-0821-4337-adc6-94770bb41a05", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e37db76-2005-4254-9515-c3d095469cba", "sighting_of_ref": "indicator--f491b307-2d5a-4824-941c-205cff38178a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5cbf4e-0a67-4ea8-a331-df67ea5e6998", "sighting_of_ref": "indicator--e73765a3-97bb-43b7-b194-86f4453303bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8df689-b59b-41a6-bcc7-14b346eb6964", "sighting_of_ref": "indicator--3a307d24-11a7-4b70-9291-ef305a5308af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd9acda-7e88-4e17-93d4-e6f443f84ad0", "sighting_of_ref": "indicator--1ffa72ef-02fd-43be-9994-9e7fb7ec5d73", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dd38ae-c0c1-437d-8c4a-8afbe0b99d70", "sighting_of_ref": "indicator--eed540ec-fd8e-42e2-8e6b-87b51fe74185", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b81b4a-0769-4e44-95ea-c54f04706fe8", "sighting_of_ref": "indicator--be220927-fd52-4eda-9a48-7eadb367a831", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71dfefc-2550-49fd-9472-40842189e844", "sighting_of_ref": "indicator--ef6c97ab-a01b-4a50-9f23-a61ce765635a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cd7ad7-12ce-4114-afa6-897ce829d786", "sighting_of_ref": "indicator--d10d1a68-7030-4935-8e2a-dce83c65d88b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e3c0b5-dbca-4fbc-b897-c9b081cec65c", "sighting_of_ref": "indicator--4a55f1ea-b4ac-49f8-bf09-9de8f7efbcc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf97f0f-bc04-441a-b7e9-971500b9ffe9", "sighting_of_ref": "indicator--29cd0230-7114-427a-b7a0-2a19be1a450c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7b89d8-f9f9-482f-b037-67afd6a25090", "sighting_of_ref": "indicator--45b2a72b-f2a5-4e02-b153-69ce4dfc8654", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa260d1c-6fcc-4531-bc56-5204927e02c8", "sighting_of_ref": "indicator--3214679a-e8be-4da9-b633-3f486fcda6cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5f3231-3d9d-477f-b41e-e4842e0e924b", "sighting_of_ref": "indicator--c7bbc52c-5c42-4add-a5bb-061959f77a2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d821c7-a896-4f78-a6df-b523d22618d6", "sighting_of_ref": "indicator--18ca43f6-f785-46a6-9724-868f424b4f72", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc45cd0f-906f-4a36-83f1-ef6ade0f43eb", "sighting_of_ref": "indicator--3575beb9-55c9-46ae-8cea-2c1258e4771d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f95ad5-c045-4f1d-98cc-adc78123d0a8", "sighting_of_ref": "indicator--e39e2cbb-79c1-459c-97b5-a5f5730aa6e6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b191deb0-eb21-456d-8e18-067c92472868", "sighting_of_ref": "indicator--35352d64-a64b-4ae4-98b4-ccad45e8ff3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da13d8f6-6c26-43cf-b935-91a6f047ffcf", "sighting_of_ref": "indicator--0171b644-670f-4042-ad5b-0817958b56a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83c675f-694d-4021-84a7-03bac69dfb4d", "sighting_of_ref": "indicator--fea285f1-2d12-495d-a8e0-edb35f2a05e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c62c31a-9667-4b36-bf8a-cc4f64423781", "sighting_of_ref": "indicator--2168ee5d-ee25-44fe-8be3-bcc1b9c0fe0d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eea4589-9a19-4e3f-b4e6-191e75f33e9c", "sighting_of_ref": "indicator--70e67ab9-4c44-4895-8193-a8acb237809a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206d9d58-abb5-44f6-a4d2-8260d8bc1f1c", "sighting_of_ref": "indicator--b33bfb7d-1497-4c53-810c-e45ddd2315cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956446de-0761-4706-9c4e-1aee7b3b0ae0", "sighting_of_ref": "indicator--62dec8e0-35bf-4f9d-bdb7-d3626578fed1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0e4d35-2c54-435b-979d-a9c311665e89", "sighting_of_ref": "indicator--e4eb735e-54e4-4498-b9db-38170284d12d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc96ea8-47b0-4a17-8e12-93328e65b413", "sighting_of_ref": "indicator--85b06fc1-49ae-4623-a5eb-2380670d3d6f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254678fa-370f-4c65-94e8-8833c0c0010b", "sighting_of_ref": "indicator--85b06fc1-49ae-4623-a5eb-2380670d3d6f", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393337f4-d5c2-4127-9730-b3361256b533", "sighting_of_ref": "indicator--3f31f0ab-8dc0-4935-9eaa-34e563e4565c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68077df3-c098-4f92-803b-172cf5fbedba", "sighting_of_ref": "indicator--e0aa8e27-02a8-419b-a600-1fc91e36471d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1611ff-c7db-49f8-8c26-ef0ff1d292e9", "sighting_of_ref": "indicator--18d40a52-a8df-489b-82b8-25b8cef56699", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaedaf9-b1a2-43e1-ae81-4a63ef19929a", "sighting_of_ref": "indicator--9565380a-0df9-48cd-9872-88b5e45e136a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebdecdf3-b60c-4253-9389-551659bcb1a4", "sighting_of_ref": "indicator--dd2a64ee-88fd-4fd5-9e99-fb545cda9874", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316634ad-f39a-492c-9f40-22526da4ce03", "sighting_of_ref": "indicator--ce2331b3-2cc2-46c5-b07a-496236de8ac1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd04aa50-e4c8-458b-8d2a-d2ab84177a14", "sighting_of_ref": "indicator--8afdaf46-74c7-46e4-b871-82d1fa9bcc6f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1acaef-42d1-403d-9019-e3db42cff163", "sighting_of_ref": "indicator--125aef38-12d8-47bb-85d3-bf282284db4d", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698b4658-83d4-4c4b-9957-73a97f6519f8", "sighting_of_ref": "indicator--a6508ab6-697d-4eb6-b231-3f35b3e7f98f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d483df94-bb97-475b-a790-8771bb3f535c", "sighting_of_ref": "indicator--fac7f90a-d0ec-4f01-863b-c4071da13ea3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d48c586-aa93-4ed0-bbb1-a619c168a9a2", "sighting_of_ref": "indicator--63ecb0cb-a61e-406c-a94b-8e770e8fd55e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7944e328-978a-480f-8b8c-fd54adb1554f", "sighting_of_ref": "indicator--86cf113f-6f98-431e-941b-c0302708db1f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f6ac5b-0bec-4a72-b287-d8a1d744e807", "sighting_of_ref": "indicator--3ee42a93-3120-4e03-a4ee-8c41b6edb6dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec2d9653-7020-4002-9009-87fc57a2ba3d", "sighting_of_ref": "indicator--23a43e40-170c-45ae-9da3-904402975e57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd054f7-cfeb-4eeb-878a-f217a8236679", "sighting_of_ref": "indicator--7209b5ae-b94f-463e-962e-ed8913cd9603", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19ffa6e-00f1-4425-8a23-4af70710cd83", "sighting_of_ref": "indicator--828a67c3-aadf-4413-9be8-902525bc82c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7cfe96-0c89-4dfc-847e-3ba7d14cb467", "sighting_of_ref": "indicator--670ccfa5-cdf3-4fad-af43-5d150f31c3d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5f1321-2991-44fe-b500-81bf52f1165c", "sighting_of_ref": "indicator--d0f587bc-6367-4498-b054-dad43fbbf2b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4f6006-48da-4583-8630-8e4931d5a649", "sighting_of_ref": "indicator--60e6a35f-cf7a-450e-8758-7396ad8d813b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445f363d-7d6c-43b2-a823-e02a4ba548ae", "sighting_of_ref": "indicator--9e8b0c89-304d-41fa-9b0a-434eca648456", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80cf1db0-39a0-429b-8a33-2b32550b14d0", "sighting_of_ref": "indicator--f7e80da5-fc86-4f3c-8566-eef4b1f2e1f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a06f177-d217-450f-9f0a-0d05337003e5", "sighting_of_ref": "indicator--94e70c2f-1aa6-4ea5-a5fc-17185a5820e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5f5fe1-f633-4e03-a29f-bc19fce14570", "sighting_of_ref": "indicator--960480f2-f530-4e70-a6ca-240f0e10f4d9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c8ba6c-4f21-40bc-b309-83bf11e67fa3", "sighting_of_ref": "indicator--8cc262ae-fe7b-4b46-b20a-eeaa7a32caae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a25a4e-8987-4213-b3b3-dd61b086c164", "sighting_of_ref": "indicator--88d5c743-d670-4f90-a27d-97a6d5c0a678", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05e7e8d-e198-49dc-a72f-24ead455924a", "sighting_of_ref": "indicator--93d180d0-8317-4574-bb4e-68d21fd33801", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93326b51-15ee-480f-8e2e-5b95ae08d0a0", "sighting_of_ref": "indicator--4f0270ee-6caf-4dd8-9275-d193bb2f66f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21afbda0-1e1d-4b01-b701-cc877fc208ea", "sighting_of_ref": "indicator--1e453e63-c802-4cac-9a19-6e70d29c8ff7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f68423f-03cb-456d-9c33-32890dd23b69", "sighting_of_ref": "indicator--94d10d81-da4b-4492-851e-23b6ea01bb75", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a987fdab-7d7e-449c-b514-8ef143a06b60", "sighting_of_ref": "indicator--e4555ce1-ed6a-4224-9c24-b5af5ce4add8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d838b9bc-a735-4b7f-a9de-323d223d6c51", "sighting_of_ref": "indicator--a851e890-3dea-4224-95e4-21e2a6a94680", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34401ffd-3f89-49d5-83f5-5a2c029b9d06", "sighting_of_ref": "indicator--876b33bb-1491-43d8-8dbd-52073e52c414", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32999ccd-4288-4065-adeb-85d66451be16", "sighting_of_ref": "indicator--fa2e0d6c-f737-4452-8a59-f22038e1fad9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37826c2f-b340-45ce-b38b-e5337b6dd6e2", "sighting_of_ref": "indicator--b7118163-7e4d-43ab-b1a1-b37619f3856d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e8c86a-8e8d-43eb-a80b-c10aba1ede50", "sighting_of_ref": "indicator--532e3881-b171-4680-a96e-1e69b2467689", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46294ecb-44ed-4e0f-9557-11662cce9bca", "sighting_of_ref": "indicator--31f8f2b6-9c67-400e-adaa-8b007f58351c", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627dd950-d626-4114-9800-045688e2edd1", "sighting_of_ref": "indicator--31f8f2b6-9c67-400e-adaa-8b007f58351c", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc7274b-0aad-48eb-841c-fd16a359290e", "sighting_of_ref": "indicator--31f8f2b6-9c67-400e-adaa-8b007f58351c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91c231a-84d9-4ee4-9de1-f22de2d5a757", "sighting_of_ref": "indicator--70123245-5d19-4574-987f-adf577559a00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43394484-8795-420c-a872-d0d6d17140c9", "sighting_of_ref": "indicator--66728c4e-470a-4b8c-af5b-1e6531d00bd6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5ef63c-2862-45a2-b908-a695f818bc83", "sighting_of_ref": "indicator--bb6f6202-7d8c-49af-a499-e66ebe383ed7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59fa3f6-c956-4e53-833d-7cfe2d200f67", "sighting_of_ref": "indicator--e42fc154-e9a9-46fa-aabe-410f91668035", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96dac16f-8285-4dc0-a9a9-0aa53ea7dc24", "sighting_of_ref": "indicator--2d68ff7c-4591-427b-ba43-c5ed5bee58be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9779459d-e5d0-4a00-a516-5fd83805697b", "sighting_of_ref": "indicator--bf07ce51-805d-4951-afd8-03d874d4f7f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cae11d-3f75-4395-848e-9270c6fcb08a", "sighting_of_ref": "indicator--49ac667d-5da7-4ccf-90db-7f6d81a5c84c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7873099-528e-426d-8774-7c39e1b101b4", "sighting_of_ref": "indicator--ee5b2a23-1135-40c6-90b2-0ac12bdf1319", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1c845d-9b6c-4970-8e1c-1e5f4403ffa2", "sighting_of_ref": "indicator--ee5b2a23-1135-40c6-90b2-0ac12bdf1319", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14adcb95-a9cb-4ac9-be53-2ab273cb52c1", "sighting_of_ref": "indicator--659c08ed-1107-4a3c-8a77-628f0f21edc2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d65cdaf-4c75-45e5-ae2d-b6967137e645", "sighting_of_ref": "indicator--be8db0f3-439b-4a64-ac8b-ad43cda478b0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7c446a-f4a6-4e88-b9dd-f0a2c124b5be", "sighting_of_ref": "indicator--5e05769f-7372-4378-b8ce-e1a089324d44", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff3daee-54a6-4103-b0c1-66e406d282f7", "sighting_of_ref": "indicator--662fd85c-e023-4b66-9d50-ef823cd22e2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766168a4-432a-4322-92d5-6184a8988a7d", "sighting_of_ref": "indicator--a6c0684c-9833-47ee-be3f-97c16ba49503", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1a5996-3f50-4107-9059-1809e4827221", "sighting_of_ref": "indicator--17c9e52f-5a84-4430-8d7a-c1b6acceb8a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43be677-efaa-458e-aba2-8f9c3e6f3928", "sighting_of_ref": "indicator--55d05660-6181-4d7d-9164-33a5aa7d7062", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f7944d-f59b-4149-a192-085dcc18298f", "sighting_of_ref": "indicator--66ee285b-d421-4b2e-9f99-7d65c5ad33ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33593d7e-d8d2-4696-8d93-678d27bf5edb", "sighting_of_ref": "indicator--47e06d9d-7ce1-4dad-811a-995f6b74ff1e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83764b5-6806-4c92-ab63-ac182a13fe75", "sighting_of_ref": "indicator--4a2daec1-0648-41fc-ae05-ade0c4049ce7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19913502-95ca-4d23-97c7-8a005661eb8d", "sighting_of_ref": "indicator--f066afb2-7b8b-449e-9f94-e8c7b225dd9f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e8086c-ac1f-4ba0-8027-5645f947e807", "sighting_of_ref": "indicator--c075033c-e48b-4aa1-a856-4ad6630e1667", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f92558-b953-476b-854b-40fbb72e6d74", "sighting_of_ref": "indicator--0341d19f-f104-43ad-9998-be6b493ce42c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8286c4b-ad05-4a03-a831-99a96e139a40", "sighting_of_ref": "indicator--7659bcd8-4df1-4019-b1d9-c8868e0aa0b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626234bc-b1a7-4f83-b7f9-ccaa0d6651a5", "sighting_of_ref": "indicator--21db5d8c-318d-4672-ab0a-33d8df591b29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c76148-a6b4-4fc3-a2c8-c914e0067031", "sighting_of_ref": "indicator--5d31de10-bee1-41d1-bc22-6ab05ceb6671", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e85cae1-229f-4d01-afce-53101781838d", "sighting_of_ref": "indicator--65009f33-d2ac-409a-bb92-387bc2f642da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad38ff2-86f4-4222-94ce-f26e69a85659", "sighting_of_ref": "indicator--6df91e6e-3736-45b2-aeea-1cfd4fc02f62", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dff9ee2-f689-4d76-ac4f-06c226733c95", "sighting_of_ref": "indicator--53fc2a58-de2d-40cc-830e-266b495a91db", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11286ef6-aa4b-4d44-9e49-88adecf8ae65", "sighting_of_ref": "indicator--5858329a-3b25-45b7-b0af-db3a881c1c41", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de7ac6c-dd20-41fa-96e2-b0c174994d90", "sighting_of_ref": "indicator--3011accf-308b-46bf-a3a6-6f162db12b46", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1004f98-920e-4c98-9390-42705dd6d822", "sighting_of_ref": "indicator--7d2a2065-9cdb-4549-9d8e-6183dc4e21a2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335f0ef4-6a73-4563-83fa-f08593ae1325", "sighting_of_ref": "indicator--b5b9fdbc-6429-405c-b5b8-5418c6963163", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9192198-c4be-433c-98dc-6737bdcb53aa", "sighting_of_ref": "indicator--c515058e-6db8-4cca-9373-34d4567cdb4c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdf70f1-b61b-41bd-966a-c0d0216fa20f", "sighting_of_ref": "indicator--b7e7c79d-67be-4396-87ae-eac56b242377", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b00f3a-c66d-4320-a075-970a0dfa3293", "sighting_of_ref": "indicator--a4d382c2-bb4b-4a06-b01c-203fac162ccd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db7c378d-1e19-4f16-a032-30732dd71fc8", "sighting_of_ref": "indicator--51dd7d8c-3dda-48e4-a746-b6ba4fe58b20", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dd5531-438d-481c-9406-bc031f4d63e2", "sighting_of_ref": "indicator--ad7cddce-4d98-4840-8491-13cd3ccabc61", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea474956-70df-45d4-86e5-012c82b5427e", "sighting_of_ref": "indicator--7145b74c-ba11-4a7e-8bdf-b462cd6ec971", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212f1558-f0a4-40ea-9f3b-e121644d7552", "sighting_of_ref": "indicator--c220e5d0-4435-4419-8528-f94761e0b16f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8666337-0337-43db-a2b5-7dfde02907a9", "sighting_of_ref": "indicator--107ce088-5df9-41b2-a4c8-5ba7c35ddcc0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfec5459-7ce3-4b76-a2dd-e2ed72e55bae", "sighting_of_ref": "indicator--2303b60d-2789-4a2e-9141-08fd902b6ad7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cbd0a0-0bc2-46af-b12f-47475b17c764", "sighting_of_ref": "indicator--cfb81797-67d7-413f-bad2-50b63ea42f0e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab85aa6a-f029-4e92-a64d-4cdad0d8dbe8", "sighting_of_ref": "indicator--c36699c4-4fe2-4907-a8e5-b4a5dcf3882d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1a1cea-02a0-4514-8e5d-954c8f2d8f47", "sighting_of_ref": "indicator--b7d91464-9a58-4661-bddb-05781f025d76", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3955c580-6a98-4154-8943-15bda4fb723d", "sighting_of_ref": "indicator--545c2e59-9be4-4673-b976-266d0953dca2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b256f46c-d5da-41c2-812c-0dad82cc6114", "sighting_of_ref": "indicator--8184fc63-1b1e-4710-9f3d-696306fcc30a", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119a46a7-2c6a-46e0-9634-af78537ef2b6", "sighting_of_ref": "indicator--c4340fb5-ed9c-47e7-ae70-7316a815604a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceddf381-a4da-4957-be0a-daef5b3cc4ed", "sighting_of_ref": "indicator--1e447d71-caef-4978-9a8e-d165db651e94", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a695ba59-02ec-4329-9dc3-2e15c54bbc39", "sighting_of_ref": "indicator--d589697f-bac7-4c4e-a2a4-0e66af8a1b97", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f301f55-ed5c-4ab6-b9cc-875fb08c7300", "sighting_of_ref": "indicator--110a4691-a2de-4790-bd88-549180451517", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c12cc80-ce27-4058-ab2d-42df0eeb3332", "sighting_of_ref": "indicator--e7b7102b-4227-4041-aa2a-96aa2dd148e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9f56d6-0d1d-4530-967e-a2ba105155cd", "sighting_of_ref": "indicator--b9a1cde9-5744-4cae-b296-20de1742f1b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deebc734-28bd-414b-ac95-faca94aa8127", "sighting_of_ref": "indicator--bb6fe9d4-cad4-4d88-88ff-194399edb968", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd4b6571-0606-4723-a12c-8b315d5d7dd9", "sighting_of_ref": "indicator--0d131e22-e357-43d2-bbab-fde9025a2b34", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266ab7a5-36a3-483d-8526-7268e6e69a1b", "sighting_of_ref": "indicator--64f35d59-a4af-409b-9be2-5f0aa92cd05f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf62005-a77c-49a3-8533-f908a0527744", "sighting_of_ref": "indicator--3ac004c9-e650-4217-81ec-4470d7e819b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ace232e-7f4b-4c6f-913e-4bce18f5964c", "sighting_of_ref": "indicator--3077bc63-7949-44b9-b33a-a93e85a7dac1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8c2c18-fc7f-48a1-bdef-a5fe18c9d8ff", "sighting_of_ref": "indicator--f77e6b68-eafb-49fc-acfc-f3d5f5280d93", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859fd5fb-81a9-452d-b52c-0b2aded2c4b5", "sighting_of_ref": "indicator--ab82bd0e-5604-4719-b91c-397124bfe3c2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a1c3e3-11ea-4065-83e7-ed24dcb114fc", "sighting_of_ref": "indicator--df6f2b3a-148e-4d07-8aa8-7503bd372ab7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a8cddb8-a8d8-45a4-a59e-5604eebd4b68", "sighting_of_ref": "indicator--09037948-15f9-40b1-861f-340791ca53ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90be68ef-a4bb-4700-ac41-144f4420e25f", "sighting_of_ref": "indicator--716690a1-32a7-43f7-83ea-59936185043f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b635cb-3d0b-4e3e-8b10-c06e07985b43", "sighting_of_ref": "indicator--72b000da-eb1e-43bb-9c90-9e68362c7d67", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5a36b4-db2a-477f-bdaa-53e3afd5a16d", "sighting_of_ref": "indicator--df5fc7ba-904d-47da-8730-f87b8eb51b1d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0f15211-4b5d-45da-80ec-310939bf0916", "sighting_of_ref": "indicator--18ebe7ed-dd4a-48a2-a0cd-701772c74205", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a27399-d0a9-487e-854f-8115aad67f09", "sighting_of_ref": "indicator--51027ea1-1364-44fa-a834-dc692b6ba1f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c713d873-6f46-4cbe-8bf5-6d71bd7eea8e", "sighting_of_ref": "indicator--13392857-ccdd-4e57-a09b-a4b0f58107e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3671a202-099b-4fd1-b359-7cf7c65f1b36", "sighting_of_ref": "indicator--c5b61cbf-2934-4017-9375-d0dc714fa8ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d5babc-08b7-42ef-8df1-021111c28006", "sighting_of_ref": "indicator--399dd644-b743-4f95-88fe-53f0121f277d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f762bfdd-5071-4ca2-aa6a-f4fc0cddfe4d", "sighting_of_ref": "indicator--a37e1273-1c76-48f2-b868-891225a87c29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bc4f7a-29f4-490e-b6a7-a9324cbb8d0b", "sighting_of_ref": "indicator--a37e1273-1c76-48f2-b868-891225a87c29", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53e36ab-8b6d-45ce-b7de-1021460d5771", "sighting_of_ref": "indicator--3274aa32-3790-4c58-bc16-1f60f4b0e57c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed295ab-4271-46cf-b0d7-6628d1767e60", "sighting_of_ref": "indicator--108941f3-1720-4edd-bce5-b4f1556fd9d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd66bf08-98cb-4696-b958-2c7cb3f1a772", "sighting_of_ref": "indicator--dce063ff-3ada-4f67-8345-5e8482468327", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ae6caf-f706-4ddd-93bd-38df120f0216", "sighting_of_ref": "indicator--fccfc115-029e-46e5-98b8-f621e69577dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1cfbbb-10ca-4dae-9fbb-ece4fed6c3cd", "sighting_of_ref": "indicator--1885a7b0-64bf-4c50-ad4c-d5007fa5255b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ef4ffe-563b-41ef-b4ca-15c141df0d9e", "sighting_of_ref": "indicator--9d601fc8-035c-4e73-a75c-650ab087740f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51bce94-b53e-4c60-b2ce-470fe394d515", "sighting_of_ref": "indicator--09383f24-b9d2-47c0-8de6-89813ccb7c76", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8571320-9e41-4b24-b96a-e9d63b17f552", "sighting_of_ref": "indicator--81056962-19f6-48ad-b238-3683e8bc1645", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3354e1-a820-4a3a-8a5f-2dd5ac14ce29", "sighting_of_ref": "indicator--35ece3b9-9431-405f-8935-a0e27561f0f9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88e1938-969a-4dbb-a698-52d0645b72b3", "sighting_of_ref": "indicator--86a86152-c83a-4c6f-9f3d-f993f96c34f4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab565d7-deac-4ce1-b896-19c7960a4998", "sighting_of_ref": "indicator--89b2663d-470a-4994-917e-64193d6c98fb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cddaee2-f155-4f5a-94a1-14d2b36f20cb", "sighting_of_ref": "indicator--3e2d492c-6505-49a8-b35a-164b6aab2186", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a90a11-615b-4d6e-8625-e57918d9e1b9", "sighting_of_ref": "indicator--392a258c-1d29-4a78-8207-ecd32b0a4375", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f959412-b894-459f-9c5d-85d95b6c287b", "sighting_of_ref": "indicator--adc4b2bf-2cd9-4dbd-bc95-787ba3a7278a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e739742-de2f-48dc-9712-704ea63f5295", "sighting_of_ref": "indicator--cf5d3f78-472f-465b-9ce8-de3c23979d4d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f9c6ba-12a0-409a-b128-14dac9805759", "sighting_of_ref": "indicator--4a699d25-8c3d-48a2-b06b-d9a7724bd484", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fea59c-21ad-4c50-8dae-28a91b3d91d4", "sighting_of_ref": "indicator--538795a1-faaf-4d47-8d5e-63bcebbf669c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7d953d-6ba9-4b0b-9fb5-e50d3c65dd89", "sighting_of_ref": "indicator--3071efe1-5445-42a2-ae17-a02494e5ba3b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fd90ce-e15c-4cb8-a004-752c68ff962d", "sighting_of_ref": "indicator--9658417a-f7db-413e-961a-0f80db1edb51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc8f3cd-c6bf-461f-9b77-ad7ee367c383", "sighting_of_ref": "indicator--56567e29-ca88-478a-b19e-04b04f5f1590", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b85a9c7-2339-423f-b2ed-fe055dcfbf64", "sighting_of_ref": "indicator--57b800b1-131f-4ed2-9f03-d90e097607cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da02897d-7ac6-4c8a-a0eb-b5976900cb29", "sighting_of_ref": "indicator--0d861572-6b4c-4386-9b70-70b4247e06c6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e87cda-cfa5-4525-9a2c-93614661245e", "sighting_of_ref": "indicator--a031638d-c87a-48d8-9d52-2dbf92ec0ddf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0652bb-2cc3-45c7-8792-f96ad3a3691b", "sighting_of_ref": "indicator--120bd8c3-b0ef-416d-b2be-fd51c3a1361c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1073845a-1352-409e-ae3e-1aeef8d4e29a", "sighting_of_ref": "indicator--2d6460d6-6292-4f7a-a51d-7a2fd45566ee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40fd3b7-dc0d-4b03-b0fc-91a63b6bc090", "sighting_of_ref": "indicator--a845dd88-c6fa-44ef-a9eb-972b4e18810f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b68818e-fe4a-41b5-9703-3ce4f70e2abe", "sighting_of_ref": "indicator--34f95020-68fc-453f-96f5-ac82766e3ef1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8144ba-b804-4d19-a447-fb9915221934", "sighting_of_ref": "indicator--6c629f2b-9316-486d-988b-b3eab120c21c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e267f2-c23e-4c54-a7fa-ba6b6b1e48f0", "sighting_of_ref": "indicator--00215e47-f593-4529-9d21-0803b3b20676", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44600ec6-a234-4101-b80f-8555c51a67ed", "sighting_of_ref": "indicator--99b10843-6497-47ab-9bc2-633851ea6214", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0243d358-8643-4204-9ab7-11f198658873", "sighting_of_ref": "indicator--33fe65bb-87dc-4e8c-a75e-0610441312c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a242ca-8a02-4356-8c30-d37bb700cec7", "sighting_of_ref": "indicator--b6b08249-2e21-41fb-9685-e48a7df9f07d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297ac6dd-d500-4f54-a97c-a025a41c303b", "sighting_of_ref": "indicator--de614e55-c521-4900-9d3b-8c990c07f97e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97de883-e29a-498b-81a2-54d9518a4ccf", "sighting_of_ref": "indicator--982a4cfc-2d18-4018-beed-f35fe16063e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87abfad0-975d-46da-b4fb-ea0c11f85ebf", "sighting_of_ref": "indicator--b06baf0e-0d6a-4a6f-9422-a9cfa5ed4d13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664b9c27-8870-434b-80fb-32456f11293f", "sighting_of_ref": "indicator--e0ceec93-071d-4b1b-aa5c-d4b8440287fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff2c802-5bab-44d9-9134-4142472a3e99", "sighting_of_ref": "indicator--2c32fdaa-4c76-4a1f-8db9-fdd8be9cb2ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b408ed28-7c29-45a9-aaf4-de42b538c1c9", "sighting_of_ref": "indicator--c1dc41d3-9882-4047-ba5f-3ad7e71ccc01", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af33fbe-6957-47ae-a758-b76fc1165b60", "sighting_of_ref": "indicator--d72df7ac-df0d-499d-99f9-941c8953801b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9775664-2494-40ab-8729-5b0130058d11", "sighting_of_ref": "indicator--996d610c-13c8-4038-ab68-8fbd4c662206", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a24a4a2-b2e4-475a-81ce-b3ced39b7748", "sighting_of_ref": "indicator--a7fe4c80-5e58-49d3-80ed-26b219067445", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62989cc7-6a58-43a8-9c89-3f7f6c10bd65", "sighting_of_ref": "indicator--8efc4c7b-c1f3-4aa8-86f8-05c780a0dc9d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386a7fa8-9800-4616-87d5-da0004ad8561", "sighting_of_ref": "indicator--01ac8be0-028f-4751-8269-b99eaaa4c84f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd65917-6c87-49fd-9972-42b081f841b0", "sighting_of_ref": "indicator--50d71833-0b87-4bec-bf24-bfc68129fc5d", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c809ecd0-9770-4283-9490-041a0686e4b5", "sighting_of_ref": "indicator--97ff130a-ecfc-4445-8ce2-2c027f1f5c71", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3641414a-7fe5-4e1d-bcf3-bc145147cfbc", "sighting_of_ref": "indicator--f0656da4-c91a-4e44-b6ba-4ee842eacff7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467d636e-353b-4257-9b35-924296f713c2", "sighting_of_ref": "indicator--560ca814-876e-450c-bad1-f6d131877dda", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834735fb-6198-499a-a204-ba08db1a5046", "sighting_of_ref": "indicator--aaf20910-de5d-4945-8f84-3fc58cf88169", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef5bbc4-7d7b-42d8-a714-da0aa478836e", "sighting_of_ref": "indicator--b99dbb7e-8ddc-448e-b8d5-79eee9940cf7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75faee15-fce8-4da5-8987-87dbbc2d42a6", "sighting_of_ref": "indicator--0030cc6c-4bf0-4e63-8dc1-12045c4dca52", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f82a6631-1cfe-4f5c-af85-c0031bafa402", "sighting_of_ref": "indicator--75e418bb-c073-457a-835f-0f8f71a921e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ac4b01-f2a1-4055-b9be-6bf1ac8130f8", "sighting_of_ref": "indicator--66048635-e33b-4055-a27c-240b0c1e86da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c457d6e-a66b-4577-8329-151f80b46c39", "sighting_of_ref": "indicator--5ba2a808-877b-40f4-bbaa-82845c84da5d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d0fc5a-f29b-4dba-b53f-9a624bff4473", "sighting_of_ref": "indicator--133739e2-893c-4e78-b287-11448a255aa3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5206d7e-7f06-47da-a346-a0c02e75d8be", "sighting_of_ref": "indicator--c3f587f9-87fd-4224-b49b-e73d935daf8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07e5869-fabe-4907-bce5-cefd78e048ec", "sighting_of_ref": "indicator--b0c34094-bc07-454b-b5fd-ea7d7c329d26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13df5745-9f2d-44d7-a515-e02a0627d539", "sighting_of_ref": "indicator--d94011f2-c95b-4ddb-82f7-b9eb0b2c1a38", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cfcb45-4526-4974-97ed-99d11b2f1ff6", "sighting_of_ref": "indicator--c6f0771e-80a7-40a5-be09-2a838d10a913", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb303c2a-0bf7-4386-9404-17502090779a", "sighting_of_ref": "indicator--6a20885c-1bdb-48a0-8bb1-84b4de9da34c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558b7103-cdd0-4e47-b1df-dfd91349dac3", "sighting_of_ref": "indicator--474aa2c6-a8d1-4ed2-841a-f247142cd5e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7858ac1-502e-48e2-b84f-c8ab2975870d", "sighting_of_ref": "indicator--b395f927-36f7-4670-8a58-2a9e2f8251da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029638a6-e8a5-4504-8d1a-ac45fda50e9a", "sighting_of_ref": "indicator--321a74be-ed86-4198-a164-37968eac6a84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7da7a9-f945-41ee-a75d-57c4d9f90a2d", "sighting_of_ref": "indicator--65737dbc-9dcb-408f-a7d4-2890d0c8ff4b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485ba20d-64e0-4d5e-bdf5-5f8fa5bfa84c", "sighting_of_ref": "indicator--dc65dee0-7c80-42c6-a93b-7a4b671bdaf9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0dea70-3e75-484d-87da-95e34d34bc60", "sighting_of_ref": "indicator--dd0b9d79-fdd5-4c8f-9eaa-762e3ec892dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f2b5ab-0cbe-4578-8b19-71fcc83e18d8", "sighting_of_ref": "indicator--ed2f40d4-6b49-43e2-9adf-f735a3372e32", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d46c89-4c97-46a5-9af7-a87039131a6e", "sighting_of_ref": "indicator--e206f2f7-ba01-47b7-bb8c-e66ff40de234", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e54035f-a2b4-4ff2-9c43-8b029b57a82f", "sighting_of_ref": "indicator--2f1147f2-0bee-4a99-92db-ead7a3323488", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a83f08-61d6-4889-8a38-1c89c6410bc6", "sighting_of_ref": "indicator--fe4e0782-c1b1-4c11-a080-071e18af0280", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e27240f-75c3-4a42-b7d8-757283aa765e", "sighting_of_ref": "indicator--d83e8354-c2c8-4e84-a685-c8f1c31069fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24db665-df6d-4544-8a41-c74e28e9f83b", "sighting_of_ref": "indicator--2b913ab6-4c7a-4698-9ca6-d0602261026a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b466639-7874-412e-a896-0f0dfb555de4", "sighting_of_ref": "indicator--f8aa3019-d29b-47ff-bf47-95ed94e24c7a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c2b553-20a6-497b-a663-ce9664d0e8af", "sighting_of_ref": "indicator--ce90b6b6-31b6-4285-b914-fc88372cadd1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc351d5-412c-4561-adef-d3e77f7ef2b5", "sighting_of_ref": "indicator--b47d5eda-c693-4eeb-bee7-c803c611365d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26fb5fd-5c74-4c64-a7db-cd0ad403df0f", "sighting_of_ref": "indicator--c1139fc3-8ea3-42f5-8a87-d50c429ef1cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6106fa8e-e909-4c44-bc59-674e139c31f5", "sighting_of_ref": "indicator--c8c2d7f2-2d02-44f4-ad42-04a696958e22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b953120b-86e5-4a43-adca-86f0885efd99", "sighting_of_ref": "indicator--32ad2339-b33a-4568-b273-31fa41ca4fdd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31494033-e735-4dc7-a13c-65b7be994945", "sighting_of_ref": "indicator--8cc427ed-7253-4627-b59e-75c9d279a61e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d2eade-f79a-4299-bfb5-33210f418e3d", "sighting_of_ref": "indicator--55c1a645-771a-451a-b8f5-443dd7beff95", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--397c2a33-83d6-4b0b-ae11-5fb05e672193", "sighting_of_ref": "indicator--1eeb2538-8b23-49c5-8b73-d44a92403ad3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a5ecb8-f400-483d-8621-2f3e5f103430", "sighting_of_ref": "indicator--2465ec50-4319-4006-b509-7e54539871e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec246b0e-0104-4461-be80-89114857a45e", "sighting_of_ref": "indicator--04a01bac-8ffc-4c22-9d41-86c09859aff5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9696667d-1a87-4db8-a2aa-54c4f11d94b0", "sighting_of_ref": "indicator--a0d856de-6c1b-4be0-8f50-3be6598b2b8a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5cb904-91b4-45c5-9195-881ec593b0b2", "sighting_of_ref": "indicator--eaeb0c77-bf51-4317-a250-d114952d2d6f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19980e6b-10b9-4333-b77c-247a22fecf0b", "sighting_of_ref": "indicator--96017d3c-c627-45fb-9f6a-6d03cea4208c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f36af1-6fcc-430c-8cf1-ab24cc4472d4", "sighting_of_ref": "indicator--0b7134f7-17b3-4e08-a4ee-b1c5a8afa955", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b15fb12-2501-4820-b0a4-30606e9fba70", "sighting_of_ref": "indicator--4fc4c4ee-f88f-4fab-a2ad-1355b3f77a74", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e009ab7-178c-4b31-adbd-37f2629533ed", "sighting_of_ref": "indicator--dc5f47b3-37c2-4e68-a26c-fef4416986e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03e3535-f696-441f-b37b-809aa313b05c", "sighting_of_ref": "indicator--3f3a1853-c10e-455e-be12-cc24482a61d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006f02ab-1545-41ed-b456-a7346e42a273", "sighting_of_ref": "indicator--2128e97b-5755-4d26-b9ee-53d00ab6bebb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a902d6d-8208-4f43-8117-2f2d1756dca1", "sighting_of_ref": "indicator--b9751608-4921-45eb-bc60-e7e48808627f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c1c02d-1236-4705-bb3f-5a648b76e8d9", "sighting_of_ref": "indicator--4ac80f57-3684-46f4-b6d5-5301f9d0820b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a4dc9b-5b66-45a1-8710-7328562e1dd9", "sighting_of_ref": "indicator--6c54a79c-8f49-4092-831f-a2dded1af01d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b468c7-e5b2-48cd-a86e-d5ba5572e01d", "sighting_of_ref": "indicator--82731ed5-8378-4c0d-af9b-15d19504b625", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2399fe6-41dd-4750-920e-2cb2728c68f5", "sighting_of_ref": "indicator--4be91488-86a8-4517-a1da-a09602e5e7f6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc5dafb-a0ed-4fb2-96c5-45bc53e3f493", "sighting_of_ref": "indicator--d21b3b10-78f3-430e-8cfc-0c866591dc77", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4d4478-814f-42c8-869b-5f033655f485", "sighting_of_ref": "indicator--8727a3b5-684d-421f-a6c5-63ef782931fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0e22a5-fb50-41e1-b466-3975f603d793", "sighting_of_ref": "indicator--2e6f6e29-3789-4bef-9b5f-338dc1ad4b72", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e3792a-92ea-4a96-a123-4c6481980d0e", "sighting_of_ref": "indicator--c4d962e1-e79e-4626-aa7a-ef05fc537460", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9731e7-0ba6-4a93-868d-2d38197f2044", "sighting_of_ref": "indicator--67162df7-84ee-43e7-a2fe-6b2e4f84ab07", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2904ff84-ef2a-4989-a3d3-43ac9df8a88f", "sighting_of_ref": "indicator--99a65c14-3067-4ea4-b9ff-739bf42b2c28", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cbad72-4742-4332-af56-dbc3790608bc", "sighting_of_ref": "indicator--856a196a-9600-4adb-8ec3-fe4887824bc5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f6d043-491e-4e85-a778-5933c640dcf9", "sighting_of_ref": "indicator--4f7f6ea5-11ac-4fdd-90f5-2b4a8953d7d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2acaba-3733-44f2-84e5-35530c68a4a1", "sighting_of_ref": "indicator--1a4ceb86-33bf-45eb-9bc3-da3d0f63bd23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b440857-9580-47fd-be5c-7f79785ede79", "sighting_of_ref": "indicator--2b837b62-0e8e-4f71-a509-1fd14b91d1a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9a4dfd-fd54-41fc-aa06-72ae4ce81815", "sighting_of_ref": "indicator--4c8f3bbb-2d2e-4992-8c16-9766fc55cf5e", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db6b6cd-840a-41d2-b42f-97b160bb9a8d", "sighting_of_ref": "indicator--44af911d-1060-4909-956f-85fdb2d5c4e3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7b61cc-bde3-41c6-b6de-7910249ff5c8", "sighting_of_ref": "indicator--e3f64198-1162-463b-aa30-1d8824cf4fe1", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528d342f-7a30-4ac6-a50d-de86e2719c30", "sighting_of_ref": "indicator--698a7e14-e8af-4188-ba44-1431a539206a", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7999f70a-d406-49d6-b122-51c2b98de48b", "sighting_of_ref": "indicator--3b09ec89-c139-4882-bca1-e3015eb40c91", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22766a5d-69a6-4c34-9d6e-1b0c7f77e118", "sighting_of_ref": "indicator--05e00dfe-7f3d-4bac-823a-9709d1064877", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada50da6-116b-45e4-90ba-72776001a6da", "sighting_of_ref": "indicator--cbe72911-8063-4ade-8dad-f39c190c9736", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99c7aa4-be99-49a4-8802-2ea5acdf4723", "sighting_of_ref": "indicator--bf2409b9-8068-471b-af79-84751e6ab745", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4b4c17-b463-470f-aea8-d658875f520e", "sighting_of_ref": "indicator--5e1966d2-ca9a-46f9-ad7a-284a1d0552aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--241153eb-de4b-48df-a0eb-9e50a88e705a", "sighting_of_ref": "indicator--6dc820b0-2ccc-4f14-b614-da9c4627a9c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc837695-1c17-493e-bc7a-58a1fc8b1fd4", "sighting_of_ref": "indicator--f7370010-7400-42bf-9105-139ec7d6bf60", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa43a4ec-8009-4d84-a866-eca518b132dc", "sighting_of_ref": "indicator--7b1ff47b-1566-48cf-8236-470f98229c2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335c0540-5594-4afe-90b9-55c33a0367a1", "sighting_of_ref": "indicator--dbe4f13f-aeb8-477f-826d-7fa68aebb623", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def311d7-12ca-484b-b91c-eb57bada2a03", "sighting_of_ref": "indicator--2ce72ffc-9a3b-4340-94ea-aaf83f1a20b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5827b22-299b-4d1b-a19e-3dea28e2c6e9", "sighting_of_ref": "indicator--d4ead738-0507-46ab-b503-b16c810300da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecd0a8d-236f-4d15-a66b-997f5be9bd57", "sighting_of_ref": "indicator--eec973ca-dfce-4c90-b441-84debe9a48a2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028aadc9-9668-4912-943a-20f2b7ba6f7d", "sighting_of_ref": "indicator--0eb65df9-99e2-4786-b7a4-a51a2f899f62", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e8a659-0919-47f4-83b0-0af8e1217890", "sighting_of_ref": "indicator--cf4f2d66-1180-4207-a0e4-2d5c23bebd73", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe33fa0-3d26-4f92-8f39-0134db4612e3", "sighting_of_ref": "indicator--41f5ec0f-012f-4b68-95dd-73b447f4d337", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3468471-ee81-4076-8f8d-6383b3c3e948", "sighting_of_ref": "indicator--ef39da99-0f70-4a35-8650-ce70916e24d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2718eca8-6096-4bcf-be67-db344d688566", "sighting_of_ref": "indicator--192e0e60-eb05-4698-9827-af30904e7d52", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d5e064-3c5e-4433-8cb6-98957749eef3", "sighting_of_ref": "indicator--c07aac82-0222-4ff7-bdaa-d78ec79fde5e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75500816-8cb7-4c22-99d3-a1921cd47f06", "sighting_of_ref": "indicator--d0628e0f-80db-4cba-9b71-3466eb6293af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b109667-a71c-409c-8751-add46b7cded0", "sighting_of_ref": "indicator--27f54a7d-4a85-4f39-a52c-3067eee3b564", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659be321-f41b-4c63-a85c-e9077c1c410f", "sighting_of_ref": "indicator--f4b666eb-b4e4-45aa-930f-90c53c8df5c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e07b72f-bf7b-4fc4-9837-2c64466b8848", "sighting_of_ref": "indicator--756fc2b3-78e5-4ead-a5e3-2a9b85c40016", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c392c8cb-d159-468c-a7d9-bf89db6ccd04", "sighting_of_ref": "indicator--6be76c7f-2d4e-49b1-bdc5-a5262ffa74bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de030c2-5eb0-46c3-937e-a00371eac703", "sighting_of_ref": "indicator--c740c0bc-d99f-4a13-9813-02f55762e5ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a84304-7c80-465d-a89a-1bf41467b4a3", "sighting_of_ref": "indicator--81726ea0-954e-4455-8e33-5208903a4a6c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0056b18-f406-4d7b-b907-4e6ec113726d", "sighting_of_ref": "indicator--57486e6e-12de-4059-83db-0434ed6fb2cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8185cbd1-f2cb-46df-a45a-645bbc0111fa", "sighting_of_ref": "indicator--38d581ae-8815-4dcc-a4f8-96f7dc882eaa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c3781c-59ed-461d-b9d0-42792236d87e", "sighting_of_ref": "indicator--869f79d2-26c1-4d9d-8c13-986a5ecbdc1d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6e4e16b-5768-453a-b645-41e1bd20ae0f", "sighting_of_ref": "indicator--5ace182f-332f-49ec-a5d5-95dbd72bd6f6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2c01eb-c637-419d-a946-0aa858abd08a", "sighting_of_ref": "indicator--d457df8c-677a-4f8c-8bec-72f0e7f01b2a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f7c21f-70e0-420e-9a40-f3e8f127ab84", "sighting_of_ref": "indicator--20e21a72-002a-4afa-851e-4eb7926733fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0664be-a716-4f70-ad3f-6c538795d346", "sighting_of_ref": "indicator--eee499bb-383c-44c6-9912-f0b3fae71676", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fed7a43-5e70-450e-af56-515052c4b807", "sighting_of_ref": "indicator--a5f69e84-b41d-4e96-ac21-53327c0c01e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801acb01-86cb-46ae-87f9-98be786d5f2e", "sighting_of_ref": "indicator--c7eb3760-dca0-4652-bcdb-01f64da78851", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7376dbb4-8199-48a3-9ef1-d5d73add461a", "sighting_of_ref": "indicator--059d1185-028a-4585-9610-7ad90904235a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc5df1b-c43a-473a-aa91-7a39855967f6", "sighting_of_ref": "indicator--7c613bf8-225b-4c5b-978b-4e8ebcf329a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603048c6-add1-42c1-b39f-bef032c135b8", "sighting_of_ref": "indicator--87c0a2ed-4743-4680-b27e-6dc534f6867b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f8e45e-faae-45bb-804f-0e3074ab900b", "sighting_of_ref": "indicator--c4605794-3831-4dca-9ca4-b10978d82037", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fcf59d-46f7-4d6c-9135-225ce185e44a", "sighting_of_ref": "indicator--7586a3ad-07cd-46da-a292-e309e675264d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8438b65a-3435-4919-9ab9-4ed13308472b", "sighting_of_ref": "indicator--017bd507-4439-45b6-b506-d71ed87ee1db", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8173c213-9303-45b3-b2f8-d4ce1e8b8661", "sighting_of_ref": "indicator--40bdbd07-039f-4273-b966-c7c2192125d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe84647-f138-4e05-9dfa-2e1a38dd7c2e", "sighting_of_ref": "indicator--04387a28-8d79-42ce-97ac-33c2bae52093", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723c6d87-db87-42ef-8764-07e8317db24c", "sighting_of_ref": "indicator--b7ac5d48-930f-43df-bc92-2f48513b84a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117804f1-38ca-49a8-b326-5b61516bf6b3", "sighting_of_ref": "indicator--ece894d7-0a26-4e2b-b82a-60647222edcb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb40769b-a693-4218-8239-87a7e197d1ff", "sighting_of_ref": "indicator--cf30bdb5-3417-46af-80f1-8aad55bf38f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5381fc0-60e7-4fe1-9199-ac4d703a2644", "sighting_of_ref": "indicator--be903e31-5152-429e-8b58-4b7a08ac885f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088a27d8-4794-4d7a-b692-4dc6d400ddfb", "sighting_of_ref": "indicator--b980a846-fea0-4d5e-8a4c-d1b45d89ff85", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa32f491-b937-4708-b14a-585e5302c927", "sighting_of_ref": "indicator--4df076f1-bcee-4a6c-8758-3344d8ce3a14", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8b5323-593e-4956-badb-4e25df88ffda", "sighting_of_ref": "indicator--ae7f3739-4d26-403e-969d-25a83281ac27", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1a585d-938d-4da4-b7c9-3cf497dacbd7", "sighting_of_ref": "indicator--33c1e3ca-a267-42b3-95a8-8320b8c39e44", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c45aa7e-2aed-45cb-8ee2-b8ef465a9125", "sighting_of_ref": "indicator--10820ab6-6f9a-4a90-bb74-de95af6a66c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e446b11-be7b-4bd3-86d8-845b57fc61fe", "sighting_of_ref": "indicator--f354aa59-d3c7-4b87-a98e-9769bc0fad64", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4425d2dc-7160-4bb2-9a16-0c08f0e99f9b", "sighting_of_ref": "indicator--267ca86e-8ab3-4f89-ac06-abf03aa713ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfca948-7e02-4628-9afb-ebf060351ee0", "sighting_of_ref": "indicator--ece959e6-67c1-490a-962e-a48f4b31b8b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0179ba3f-018b-49e0-b1f9-17523a20c995", "sighting_of_ref": "indicator--2769134a-9954-49c5-bca2-4339a49be99d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f929409-43d1-4461-905b-7259a117f2c3", "sighting_of_ref": "indicator--c70b3d03-6cc9-47a6-af47-031c69e9a31b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b36d80e-517b-4229-94f7-63b31265a9b7", "sighting_of_ref": "indicator--65cf5875-f7dc-4795-9a33-e1d72c7fc53f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfd5b76-c700-4477-9a27-6b09106ae69a", "sighting_of_ref": "indicator--677f79f7-e69c-45b5-8c37-7c77d5c524af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13797e59-49b4-4bc7-b147-2c693b9bec16", "sighting_of_ref": "indicator--9e7b8385-b493-4a43-9190-825f67d559ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043afe31-581b-4d65-a9d6-5010d6229105", "sighting_of_ref": "indicator--799bcc25-8c58-4c69-8dcc-a1b9982a07c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6368cad-d1c1-48c9-bb41-8a927149f5d9", "sighting_of_ref": "indicator--8c75d961-1985-4209-a0bc-e5f9f0556e82", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7f854f-1d9c-4096-a77a-f7f46b5c2448", "sighting_of_ref": "indicator--645a5c51-1eed-4f85-a355-47b36bdb188b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70df0553-3fe9-4fdf-9c51-968f9ea76980", "sighting_of_ref": "indicator--616e8842-6826-4964-a382-a4853ea53560", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b5fa15-7897-4ec1-9608-1377b55d76ef", "sighting_of_ref": "indicator--b3c934e5-1e98-476d-95bf-755093de80df", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a38ec7-5a3d-44cf-bb03-e24f2c90149a", "sighting_of_ref": "indicator--eb4ed07d-395e-42f5-85ca-9072a07bc894", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b35cac-f29d-4307-a718-19240c592681", "sighting_of_ref": "indicator--4fea3360-a02d-4d59-8235-6208946c456b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15d596c-0707-4e35-92c7-79dfa72e73c4", "sighting_of_ref": "indicator--a5133e6c-4ee5-4db7-90b1-4646d477fb8e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11001ecd-4e98-4041-9643-4c10677979f9", "sighting_of_ref": "indicator--246d4329-4c46-4a1c-be78-39570e483d7d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7905884-1fab-45ce-84a7-365af0387e90", "sighting_of_ref": "indicator--7c64f76d-63a7-42ce-b383-7b1f3dc2da4b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaea4694-9a88-421d-a368-feae9755f6a7", "sighting_of_ref": "indicator--622479ea-d550-401b-942d-2b29b732128e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5753754b-314a-4942-8e13-896842390221", "sighting_of_ref": "indicator--3f1c500b-15fd-485d-bf0f-c9418348f216", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c571af18-935d-45dc-8ca3-587410ae4c27", "sighting_of_ref": "indicator--1ec298df-bed6-4a69-8f4d-d794138533c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63264943-725f-433c-8b10-82a79945d90b", "sighting_of_ref": "indicator--ea634bf7-e659-498e-a86d-9c6e8975cdaa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1cdbc9-fa2b-4f78-965e-f634ed471469", "sighting_of_ref": "indicator--3e8bc56d-1e62-4a83-bbf8-3b5410ba1d1d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8cc28c2-0b33-4544-a585-a7d89be87324", "sighting_of_ref": "indicator--eed72fe9-76bd-41cf-8e36-cf991f43f3af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793affe1-d541-4ef1-a1c5-df2d741d617b", "sighting_of_ref": "indicator--2e07e2f6-59de-47e3-913f-59a74f3c9a38", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d0f4f4-7e53-47b0-b3a9-1dafa7d34485", "sighting_of_ref": "indicator--b008f060-00b6-4f53-8566-264cae6b8ce2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b265f7-5f20-4bb0-a1f4-07715a8e3704", "sighting_of_ref": "indicator--900ea705-7416-4459-ad36-821eb35fc854", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ffabe7-9b46-488f-acbd-872dd743a0a8", "sighting_of_ref": "indicator--3baee386-28ef-4363-a8f8-5af1ff5c008e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cadba1-0448-46af-96fc-6bd9198dcc2e", "sighting_of_ref": "indicator--725ecefd-a7a8-4eab-9de4-6912c4662d8d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5aaa76-33fc-489e-9b7f-7d1776548cc8", "sighting_of_ref": "indicator--c91f80f2-712f-466a-beb4-84658eb68d82", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10423a20-4219-4ec1-aefd-6167ddae20de", "sighting_of_ref": "indicator--3f689c50-a5cd-47e4-bc02-b98a1dae6578", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866e6a76-4a1e-41a4-b8a9-cab92f181023", "sighting_of_ref": "indicator--9dec0aeb-6fe5-49d5-9301-306d123cc418", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1edc025-8abf-4b91-b298-de508b0a6cc6", "sighting_of_ref": "indicator--783fd481-92c9-4b3f-a856-40a864bc2ed4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e074586-14d4-4605-9b71-b5e252868afc", "sighting_of_ref": "indicator--9f78e43f-fcb8-4e22-9e04-fade3b0f12b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae50a8a-d7f9-4e53-9113-68b90e17913c", "sighting_of_ref": "indicator--47c6c234-6be2-43e7-a5e7-1e76ee46950b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c8078f-6c33-4a6b-bf72-39bd6a6f38bf", "sighting_of_ref": "indicator--0df68e0c-4da4-474c-88f4-17bec5895bbe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feaf2afa-6c58-410c-b116-e2acc9ad0a55", "sighting_of_ref": "indicator--8932829c-e533-4a00-b52c-49ae6035fbdb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8e01e5-6563-4405-83aa-7c8634622196", "sighting_of_ref": "indicator--057040ba-a550-43c6-abbe-552a35b52568", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb92c72-eedd-402d-aac8-41f1fc861db4", "sighting_of_ref": "indicator--884a8be5-3170-4b29-95c4-923e4c298fd2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efff3bb1-15bc-4002-b781-9fecd7912c39", "sighting_of_ref": "indicator--31ba5464-5769-4548-891e-4f4afbd1070d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9db937-2450-489e-8428-5c16e740a7f7", "sighting_of_ref": "indicator--bdfa51d1-a815-4664-9173-0a061eb86880", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99e00c5-e037-473c-9eb2-1080ef5d167c", "sighting_of_ref": "indicator--ecffc7df-b4e8-412a-b951-c88afb8c89a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d5af2a-1a13-4c93-86fa-06dbfa7cd038", "sighting_of_ref": "indicator--cfd0e621-c82b-49da-a2e9-331c9823c2c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0554d925-8aff-460f-9695-12197971b5ec", "sighting_of_ref": "indicator--3c90ab03-f0c2-4601-8c87-11da8fd0aab0", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8d3405-55f5-4442-8e25-45cbbb0cddbc", "sighting_of_ref": "indicator--89ff8739-a37f-4066-8620-cb3cf225509b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f207c202-4e86-4ab4-bcb1-d4638f53bcf4", "sighting_of_ref": "indicator--3a6c41bb-4521-404a-9ddf-a02cddba6c84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e555f13a-5164-4496-9f85-277080f1a2fb", "sighting_of_ref": "indicator--5639d896-84c6-4b68-be14-ddede0b85563", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc137cf-4e55-4908-be44-846df849d9cc", "sighting_of_ref": "indicator--4001eafb-c3b0-4042-ab6a-75070a69935d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5554cec3-69b1-406f-ac02-0650a17cdb39", "sighting_of_ref": "indicator--7eabae64-72fa-4d3a-857a-823cefef3f3a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0adb61-52ee-4ade-b11a-0758f9ee9ce3", "sighting_of_ref": "indicator--b5825035-cd90-47c9-a5cf-e63b72eca9fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc0aff1-267d-456f-821f-4b0c470d37ff", "sighting_of_ref": "indicator--392c3f9e-8a39-4f5a-b7b6-d65e125a5c74", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce0ddcc-7c57-4e83-be5a-4d087e8968ae", "sighting_of_ref": "indicator--9b7e103f-b87d-4666-99a0-1c5d4f963412", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99bc2663-582d-46d0-9627-350ddc803761", "sighting_of_ref": "indicator--05ba7e3c-0a63-4f1a-94ba-37304e902eb7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edfadcd-6052-4095-9997-09ca4df91871", "sighting_of_ref": "indicator--dbbbcb23-6b21-4571-afd8-cf00eded4e9f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6d391a-c95c-409c-9ecb-dd28a566bb4a", "sighting_of_ref": "indicator--0dab93cb-ea5d-48b5-b7da-dd529e0b7e6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cd726d-b79f-4bc6-995d-819c7edf4432", "sighting_of_ref": "indicator--ee62f632-35c9-414b-88ed-8a2a15eb82f6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f167f632-21ff-4e2d-ab65-f7232b5610c0", "sighting_of_ref": "indicator--363a08e1-ae5c-493e-bfe1-36c4e9d34d69", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f0e319-781f-4f37-89a2-b0cb086c63ed", "sighting_of_ref": "indicator--c449884d-5234-41e9-a529-c816c84a8797", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cecf631-3d86-49e0-99e9-2ea284623f51", "sighting_of_ref": "indicator--85fcdd77-fe8f-4bd2-a230-cafa38e48ff1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079890ad-936b-49cc-b601-434880161e42", "sighting_of_ref": "indicator--587251e2-291c-486e-94b6-69fd52dfba1f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb0f2ab-26a6-4648-98e3-852e7d844dcf", "sighting_of_ref": "indicator--4c923440-67d8-416f-9d52-b09028503917", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4903c1e-c82f-46c7-ad80-e67e48ab6deb", "sighting_of_ref": "indicator--79db312a-7177-4592-82e7-d137c1041a8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac2bc217-f943-421b-8f1f-1e0db71d0d7b", "sighting_of_ref": "indicator--93295aef-400f-4775-8381-fdf09da86465", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ac2365-1e90-4d1a-b878-3a11d0ea39d8", "sighting_of_ref": "indicator--61a00e22-977d-4d3c-a768-2db3b855b734", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07347a59-33e2-4448-849f-31b8fe87fc8b", "sighting_of_ref": "indicator--74008eaa-0497-45e4-a645-17092c9cd712", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662330e5-9f2b-412e-9394-0ac58f9d35ee", "sighting_of_ref": "indicator--d423b034-936f-4e55-99fc-36f4bea44afc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3403def1-fc88-4b46-bab5-b214e37f2b3c", "sighting_of_ref": "indicator--b97e0408-8858-49bc-bb43-47ae9d6b135c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00890f1e-3afa-4a9a-bfab-7ec153674284", "sighting_of_ref": "indicator--7717880a-5699-41cd-bb58-b79c736c94b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e3a2ff3-5d23-44e5-8b2d-870478f490a8", "sighting_of_ref": "indicator--8977af5a-3fc6-4ff0-9233-b75a09c4dcf8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2bbecb7-983c-40f4-8880-dd8f02280c41", "sighting_of_ref": "indicator--702a1e9a-08fb-498e-b96a-f3980d1c41a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c229b188-09b0-4607-8266-00b665f116f6", "sighting_of_ref": "indicator--1e42ff28-a61b-43d8-b4a1-58ff3ee1486d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc3a505-e900-4f8d-b559-fc7d9f8b2429", "sighting_of_ref": "indicator--ca24d273-05c9-40ac-ab26-9a518c373a39", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7387fc53-fdcb-4ae1-91ba-a346fe283a9d", "sighting_of_ref": "indicator--c42206f2-86c1-436b-8105-5df02efd06f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7dffe4-718d-4b7d-b11c-041a849f438b", "sighting_of_ref": "indicator--906d59ce-37be-4d3d-ba0e-72e808ac1215", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a1f4d3-8f37-47b8-99ff-9033f79b3c0e", "sighting_of_ref": "indicator--98876a46-9408-4c11-aea1-a312b568eed8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c5ba30-1199-49ad-b3dd-442fb4ed7595", "sighting_of_ref": "indicator--17092bd9-44ff-4935-ae28-b98183375b67", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb1b190-aeb6-48b9-a14e-74db33d15dc5", "sighting_of_ref": "indicator--eb8bd845-386b-426b-9438-5bec5285c3d4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00c5849-fa98-478c-96b4-f679ecf3236e", "sighting_of_ref": "indicator--0589b2c9-8367-477c-b27d-06ed73230160", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79efc46b-7021-4896-bc02-a7bcb13fc8cc", "sighting_of_ref": "indicator--f33a64b3-c718-4fe6-a645-52a5e0efd764", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed71d4db-3321-4b39-b219-fab8b12dbc76", "sighting_of_ref": "indicator--3ddcd1da-abb6-4899-ade1-147f9c4321a3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20056ecb-482a-4f83-97ca-8f1ad57ed317", "sighting_of_ref": "indicator--51b47d1c-b7e8-463e-8efa-6debeefa8bca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13bd7c6-a3f2-48ef-8534-a418e475120d", "sighting_of_ref": "indicator--c9549c08-a62e-4c9b-a411-37d272376a88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b16236a-c86e-47e8-9136-a5b6a7741bf4", "sighting_of_ref": "indicator--11cf9226-bb99-4d3e-91a3-72e29d99f7cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0a3e89-cd49-4b32-b272-735fd21abf3b", "sighting_of_ref": "indicator--203ebb76-fea9-47d5-92f8-24e9a0302a68", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b3760c-f7a7-4953-8060-36c3ad6c4931", "sighting_of_ref": "indicator--d9d87f56-33e9-41c0-b014-c73aa38e24ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3e3e7e-a7df-4ab8-9179-eedd4fef4b68", "sighting_of_ref": "indicator--d6b72c15-149c-467d-950e-9c8fad67507e", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b545cd-ad59-4d1f-8484-f492327e210c", "sighting_of_ref": "indicator--53b94eca-fc0e-4cd7-bfb1-69436a3301d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7d9f14-29e3-4746-a2a9-1ebf1db2f5f9", "sighting_of_ref": "indicator--eea45b51-0482-4084-b003-fa55a3105605", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf039fb-991a-4467-836e-5e485551568f", "sighting_of_ref": "indicator--e5ab7bd8-6e54-4c29-a6eb-bb50b1164376", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd400b20-5e1a-4d5e-a95b-081263d34854", "sighting_of_ref": "indicator--665f8c0e-3ca1-4088-b201-1ce585587ed7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20f0153-a5a5-447e-ad7f-09d845f70b7d", "sighting_of_ref": "indicator--721dd036-a04f-47b7-be1c-4a6d755c4534", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b0dfa6-2deb-4f7e-a40a-5720610976c6", "sighting_of_ref": "indicator--d730fea3-eb59-4521-bde1-7cd05bb6fcf1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a693d79-f13b-4b99-ba1a-a19e72ac708c", "sighting_of_ref": "indicator--b982fd56-ff32-4fdb-89b3-dce2bff4c1a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb637ecc-c210-467f-998d-3d08f152262c", "sighting_of_ref": "indicator--0dad73de-bb3e-4312-8a96-4c7392729189", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47887c18-1009-43a1-b984-d1bffbca61e6", "sighting_of_ref": "indicator--96665b19-d56f-48b6-b765-1303aa87f222", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50770040-448f-4950-8713-a92ecfac9a7a", "sighting_of_ref": "indicator--dc40d4cf-3920-421a-93db-09ed4279ed95", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae3093f-91e8-4461-8f33-da2663585eed", "sighting_of_ref": "indicator--2c4fab68-0e04-4b43-ae7e-66180cc1f460", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e6d347-eefb-4272-bbb6-1dc9c43f9ede", "sighting_of_ref": "indicator--b369cf93-a5c4-43fe-adfc-e855add774e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0eff9c-4615-4c5d-9c4b-e66e39703879", "sighting_of_ref": "indicator--3b23a7db-56f9-48fe-97ef-c715f85779ec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f848bdc-5e14-4c19-bfe0-9cb824c0e7fd", "sighting_of_ref": "indicator--f0cb4254-5ea7-4c30-a63b-57a9d8872702", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe1d2c8-7cdf-4de2-bbce-157fcd2981ac", "sighting_of_ref": "indicator--1773cdb9-0113-43bd-87bf-c76dda00d0af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b6ced8-1df5-4998-9e48-513a4489a021", "sighting_of_ref": "indicator--ba644f58-0dcc-49a8-a191-4c7b72464a09", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488ba71b-263a-4ba8-82f8-11f512d10290", "sighting_of_ref": "indicator--ef504167-ef7d-4883-97e6-3be2ccd608fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f486b3c5-7acb-4e8e-a3aa-3f67b02a14e0", "sighting_of_ref": "indicator--7150bd06-1457-4c77-8c6b-68a61043e65f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee29b9ff-3551-4c6d-98b1-9110fb6c2012", "sighting_of_ref": "indicator--86f5735c-c960-4da8-9071-b9be3110047b", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235dbb9b-b3bb-410d-b090-a5b1233e48dd", "sighting_of_ref": "indicator--7c38d3a0-21ce-4da9-a73a-366bd79776db", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85825a64-fff4-45e7-9c50-d17af96271b0", "sighting_of_ref": "indicator--6dd44069-c14c-41af-9f9e-b724566c22e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a5a6bcb-377a-4782-9526-0ea2b3113918", "sighting_of_ref": "indicator--686340b2-9b4d-4583-ad95-ce61d302225a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf44770-2380-4974-aa25-aad7851a0aac", "sighting_of_ref": "indicator--b25ea5fb-c6e4-4e14-a39e-ac43a927ae4a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba7ef85a-6a12-470d-b718-b3759480399a", "sighting_of_ref": "indicator--f4dd523f-09eb-4e65-88cc-84cfd73d3792", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24420632-a7c7-4fa6-9cc1-d14891ac8c79", "sighting_of_ref": "indicator--6872f87e-e993-43c7-a4e6-1d9b6c6c11b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8218b53-7c02-4d51-9dcd-5e36a369cd73", "sighting_of_ref": "indicator--1cf85461-1f6f-463f-b572-6c14ac9fa4e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1068dfc-1aeb-4fda-be45-f4f6d2f7650c", "sighting_of_ref": "indicator--9a39e0f5-2795-4783-9538-3e205b1ff932", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fadbac0-88c9-4b50-accc-f178cfa038a1", "sighting_of_ref": "indicator--168d099e-1c18-410a-a299-a0257b19ecdd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822dc03a-2011-4b61-a5ac-5d50b8b6543c", "sighting_of_ref": "indicator--615dda85-fb05-40a2-81c9-fe022212d8c8", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe53eeb-6331-4307-b0a0-6d84ce0dafab", "sighting_of_ref": "indicator--6918d3a0-4a74-45c9-a6a6-80099d5c49fe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07e2791-48e2-498b-934c-584dce2deb82", "sighting_of_ref": "indicator--1cf06b66-d52e-459f-8816-166e6d7db850", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a780ed7-054f-47e5-a599-9c9ac1acf1c8", "sighting_of_ref": "indicator--b8a19e54-08c4-46be-badc-34a7d2f40e65", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36df4b7e-6c8c-4fff-80d6-2fdf469c95c0", "sighting_of_ref": "indicator--71f355db-895d-4c8e-94a9-9f8acece3cd3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc2315f5-a40d-4a88-94f0-d606da3ac17f", "sighting_of_ref": "indicator--95ea4e3d-08ae-4e86-8822-413835f3037c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b5eb42-27ca-4d47-8160-780961a761a3", "sighting_of_ref": "indicator--bd94845b-2b71-474c-85f5-2a1fea49bdfb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121d31dd-5777-4685-85e1-70007a45a1fe", "sighting_of_ref": "indicator--6f7e307a-093c-4b79-993d-9ceb7bd7b281", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d16e4a7-50d8-4a13-9b92-a547b1d5e887", "sighting_of_ref": "indicator--f89a09aa-0701-478f-8dfc-e2fc94997290", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07edbd6-f34b-438c-bfd6-744d0d9b6f30", "sighting_of_ref": "indicator--b6185952-147a-495c-8d23-fdd9a44b4c2b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40c7b2a-f517-40f2-8af9-434a817d778a", "sighting_of_ref": "indicator--73e1d605-b326-48dd-852e-c7ca000dc42d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1543fe7-89bf-4b51-92c3-f05c215f2bb0", "sighting_of_ref": "indicator--9a499b15-8424-495c-b6aa-c7c5335cbc2d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb67cc08-fdf9-45c6-bf74-7235c926f0d5", "sighting_of_ref": "indicator--db5f8081-09a7-4a35-8e37-a740d0126789", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8154d64-efb8-4b38-9491-b701b8e923b5", "sighting_of_ref": "indicator--a7778cce-f459-41c9-81ce-741803dbda7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d9e163-54e6-409f-baac-c1a479737289", "sighting_of_ref": "indicator--9bd445f7-3036-4305-a11c-35d0a9319957", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e96e74-97a9-4355-9479-7e45be9e7973", "sighting_of_ref": "indicator--ebafe09e-fa18-4e0e-9b8b-9a65d70b7cc9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea058ae-407f-4c57-ada2-41f3a7f36a5d", "sighting_of_ref": "indicator--336f5a15-5841-4caa-86b9-e00a9926cbfa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd15038f-e2fa-4d9b-8041-deb99174f063", "sighting_of_ref": "indicator--fc7e86c1-4c75-4928-88af-0728dbe5b204", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887ed71c-810e-4159-9987-a96d85323e7a", "sighting_of_ref": "indicator--74bcb7ed-d973-4254-99a0-d730ef69cf86", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a314a56c-08ec-41eb-8b35-4fd2968f910b", "sighting_of_ref": "indicator--e0ddc3b7-18d8-4859-888e-97dc60cc0341", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ed368d-4c7f-4c4f-ac49-63ed4f90a7fc", "sighting_of_ref": "indicator--d9caa765-9a42-4b39-b613-78d3ebba9b89", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5d9c4c-f512-41f2-9cf8-d8e779c2e55c", "sighting_of_ref": "indicator--7165fc1f-c848-4f4e-8b60-c1e1dca6db0c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655e1bcc-a907-44e0-8221-dd0a5123726e", "sighting_of_ref": "indicator--f61bef24-d8e5-4f77-9df8-291c8a3fbb04", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b732ecbe-7b67-450f-8853-02b1ee21d113", "sighting_of_ref": "indicator--ccc319de-830b-4b33-89eb-a3c202a1de31", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3aaac1d-1377-4fe2-8100-b179e2770c63", "sighting_of_ref": "indicator--2b4861a3-9331-4158-a82c-462eaaec4f5e", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4cc220-0e86-475d-a3d6-f358cc6dc77a", "sighting_of_ref": "indicator--2ddaecb5-36e8-4b42-be43-e2613eb66e46", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854586a8-5479-4b3c-8137-e6b5b3f22c46", "sighting_of_ref": "indicator--a11ea025-5a9c-4882-a5a2-ab15f0535c95", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aabfd3e-ee50-4fb2-826e-f83ad7642ec1", "sighting_of_ref": "indicator--d57d5a66-a616-4f17-ae75-368152dc39c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c33ddba-77f1-4a86-8382-8ac4e8b4643e", "sighting_of_ref": "indicator--4135d768-e177-45a0-804a-53744a8ed1b1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8276bed-ae8b-43b5-b355-cab1b0351540", "sighting_of_ref": "indicator--0240e1ec-3a31-4ac4-8b81-ec203e300e29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f723b0fd-3396-47b5-b900-8dfd1b2d9add", "sighting_of_ref": "indicator--ebbd6016-1a2e-442e-92a3-ed45c561cd90", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734f217b-8ce2-47e8-9fae-59d0c01c1a5f", "sighting_of_ref": "indicator--709c97fd-1229-4ab5-85ed-5d974b350271", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef9764e-d053-4655-9a8c-ab86901ca737", "sighting_of_ref": "indicator--4cf8e61a-416e-4cfc-a680-c162133669b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bad9dd-0899-48e1-8e32-156ef993c082", "sighting_of_ref": "indicator--76a2310b-9ea3-472c-b802-a6de8ab7de9d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf52e21a-e91c-496b-b857-a9701f02de7a", "sighting_of_ref": "indicator--8d51a00f-e5dc-43de-9eba-63cf648a577e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479bb409-3acc-4638-bf32-e77626d141f0", "sighting_of_ref": "indicator--e3eaa797-aa29-40b8-b8a6-9c59c1fe6bb2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5caceb-57fe-4ff9-8be9-1e2a7af356e3", "sighting_of_ref": "indicator--917c22e6-0a42-4325-97ca-7a587ae314e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6207be31-702e-4f00-b2d2-2fb4f95a0c38", "sighting_of_ref": "indicator--2f485bc5-98f0-41e6-9198-698ad8e8fab8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7ceb66-2bfb-4380-afc7-726ab9c93800", "sighting_of_ref": "indicator--f37ad4f2-947e-4e0c-9bd1-0fdcd47af3d1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6a31d0-152e-44f2-947c-ec4a8daef450", "sighting_of_ref": "indicator--6557259c-3dcd-4f98-a694-7059de66f6dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c6b01d-2658-4593-95d6-37c6243d0a49", "sighting_of_ref": "indicator--31093637-ac52-4a43-b238-2c58c528c315", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc8f6c1-17cd-49f4-9223-31ee194d4fb3", "sighting_of_ref": "indicator--4e7e1001-bf42-4591-9782-f144cbcb5bd0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a404cc4e-72f5-4735-99c7-fb6e61b33982", "sighting_of_ref": "indicator--40ce8994-0a1e-446a-8d72-40de7049861c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18864792-7645-4cf2-8a6d-29194b15dc90", "sighting_of_ref": "indicator--9868b68c-11ea-4733-a42d-43c031490b25", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0386350-195a-456c-9358-b37908d8ebbc", "sighting_of_ref": "indicator--2096c2b9-4cac-4096-929d-44fc9280e3f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d920c2-bdce-4220-8f3d-c6871162b216", "sighting_of_ref": "indicator--187c4800-9d3b-47fe-a1f2-4f200eca357c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00acf539-8ab5-4b21-95f1-7a3d106fe779", "sighting_of_ref": "indicator--7e1c7ba1-efdf-41c3-aeb8-0de6cfd5722c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176b251d-8706-4142-b9f7-062cd86fb4c9", "sighting_of_ref": "indicator--0bf583ec-8748-447a-942c-9ca6081b3161", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7ec975-04c5-4d09-940f-d9d65ad111bc", "sighting_of_ref": "indicator--7eaf69b7-1afb-45a0-855e-59a1f8ed917e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beec4bcd-8db6-4b46-898b-20fc6d90808a", "sighting_of_ref": "indicator--6c9532a3-99da-4ad7-8f13-28ff6441b63d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38edcab-f124-4759-84d6-2bc7c7ab4d31", "sighting_of_ref": "indicator--5dda06b0-1dc2-44da-933a-2a67d28bbf2a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bf2fa0-bcf0-4245-b134-b63d507a4727", "sighting_of_ref": "indicator--919b07f7-576f-4ec0-b088-d3cd27adb0a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e2ac6f-662d-4f12-a228-35990970332e", "sighting_of_ref": "indicator--bf92e373-dadf-40b5-9a28-609a1bd16b44", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44753da-7e5f-486c-91dc-334d6e46fcca", "sighting_of_ref": "indicator--31949891-a65a-4745-bf76-3c49414d10d5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7573a5c-3814-4a07-a5e4-84249ae14f49", "sighting_of_ref": "indicator--9e48aa76-ffcd-4bb3-bfbb-3967f05752a7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7258e4cc-430c-4b0d-8864-4ef10b860eee", "sighting_of_ref": "indicator--fd57ce2d-cdd8-43fe-891d-7990b33086b1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1737aa-a7ca-404e-87c5-c5778bbdc686", "sighting_of_ref": "indicator--b00ed911-73e4-42d9-9360-45f10a08347c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3769a665-b2d0-4e81-8152-797885517ee1", "sighting_of_ref": "indicator--e332454b-592a-427e-997d-69c32b025e99", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8a53bd-1493-4aae-bf0c-143e15a9809d", "sighting_of_ref": "indicator--8308cf0b-68ef-465a-9b2b-1be1c7553556", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97d5446-fc25-4ec6-9655-b249f8f846bd", "sighting_of_ref": "indicator--41f45798-5641-4a5f-be5b-de1adafddb51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f278869a-271b-4a76-a624-6dd4ae2c11c1", "sighting_of_ref": "indicator--36d277bb-e29c-4012-8565-148f7d2d1f1b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771e744d-0231-4260-b381-057d2739d6ab", "sighting_of_ref": "indicator--9e02ec9c-312d-4bad-a5e5-465f9b4e65b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4642b569-4e7f-414b-be25-607fb42405a4", "sighting_of_ref": "indicator--7b934431-7e43-4093-8919-174210b2c2e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c62abb-2307-4258-9ed4-3bb151418465", "sighting_of_ref": "indicator--edc5002b-f2e7-4d6d-8aee-53565fa2f810", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f960e3eb-80ba-48cb-90bb-31f090a8d50b", "sighting_of_ref": "indicator--c65fa123-21fe-4362-bdbf-88a38c4934ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f67d7e28-8281-4b5d-9b03-03d2119683c4", "sighting_of_ref": "indicator--1d9eb4d0-6117-4fe4-9c24-1011ae1ee6ad", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995f503e-8c74-4c4c-85b0-ad214325b0df", "sighting_of_ref": "indicator--4bdff2f6-df65-40ef-b733-d0ab57c8ef50", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a61a957f-54b1-4a11-9fb1-628f926f9f06", "sighting_of_ref": "indicator--c707c038-44e1-40b8-a643-81c22ed0400c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679ba2f6-b177-410b-ad55-26635d773d53", "sighting_of_ref": "indicator--3e5f7463-f0cf-45da-8c82-6e6d23c38d4a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9869c38e-b1ba-4c1d-bf8e-3fb2659ad568", "sighting_of_ref": "indicator--80d246e7-63f7-4b6f-91cf-afe69df9bade", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df2080c-0073-4c65-9535-08244d7f03a6", "sighting_of_ref": "indicator--efa74019-ddce-4d79-a832-45ec9863ef40", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a180474e-9916-4081-890d-e1c4f9c3bec9", "sighting_of_ref": "indicator--5ab1f2aa-7611-4100-9595-53aea157d74c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ccc8cb-80c1-4c8a-bb10-f5464c1a9f6e", "sighting_of_ref": "indicator--f92350c8-0106-4260-aab2-de2436cad4ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b88c7c-3998-4624-a39b-595be25e7c02", "sighting_of_ref": "indicator--0067c864-afbc-4445-b015-f9e6fecff5e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cd831a-7403-483d-8f03-6ce854a7dfe5", "sighting_of_ref": "indicator--6271c369-e757-4c02-9315-0f93b9d91a86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7825b25c-0590-4564-b34a-20ac2e9013db", "sighting_of_ref": "indicator--fcb6ab83-fdca-42af-8224-c6d918ba0851", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dede9126-f461-4b3a-aa0d-a09f02cc7929", "sighting_of_ref": "indicator--8e7f38e6-8d2f-4514-a681-1ed5523f9fac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cb4569-16ff-42eb-ae82-9483980a9587", "sighting_of_ref": "indicator--abca8df1-0215-448a-ae6d-0cb69f911bd5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e203ac-34f0-4ebd-b5bc-f3c0ada3fe7e", "sighting_of_ref": "indicator--910bb730-0fb9-4295-928b-76a2b76bb185", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b728ee8-8eae-4d25-9d8f-58382358bc66", "sighting_of_ref": "indicator--6dae51f3-0e83-40c3-9798-6154368982f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--572a5a51-bbf2-4d75-bf67-f375d2d32dd2", "sighting_of_ref": "indicator--d8340aa5-74e9-4518-b48a-95d8d528dda8", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d9d291-52f3-4b2a-9cc6-e4e4b3f8a7b6", "sighting_of_ref": "indicator--be264b58-9a02-417a-b4f6-ede9cc20b55a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f91f11-a5c0-4b4e-a598-0553dcc5a70d", "sighting_of_ref": "indicator--86981f3d-9a32-455c-a38a-f4ec10decfd0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--467f9922-1546-4b61-9330-564d15db4c60", "sighting_of_ref": "indicator--61d7d22f-255e-4002-9750-bd281df6275e", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e5a794-d739-4a92-84a0-45ea99c0dffe", "sighting_of_ref": "indicator--2b9dab71-6eda-4e56-afa9-8579f060bfbc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7e372a-132e-44a3-a2d3-53d5a622c9f3", "sighting_of_ref": "indicator--e4e0e7dd-3c5a-4533-91ad-70323c11dc23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be78d0c-2cd3-428a-b047-e0deecd4512d", "sighting_of_ref": "indicator--46b2ff6d-8a1e-4c81-ab27-97e77198fb67", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90773c7f-f6e3-479a-bbc7-945de5d05ca0", "sighting_of_ref": "indicator--a44ea605-c462-4ae7-868e-629bfdb8ae5b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476b8636-c66d-469a-8896-a32853b4c8a5", "sighting_of_ref": "indicator--8315e7e8-513a-4b18-a691-f1fab3d485f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a913a0d3-244a-41c9-a99d-ee85a3119424", "sighting_of_ref": "indicator--79f38a1f-f9fa-498c-836b-a07e7d00dd84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e688bedd-88e5-471d-9fc4-160323936c7b", "sighting_of_ref": "indicator--5e2d1924-e209-450f-83ac-40c3b0803e4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdd0ebc-8f06-470d-851d-46c262a17d84", "sighting_of_ref": "indicator--2d3d72e2-62d8-4ff1-b78e-694f71c526c1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a85d6f9-b826-449a-a7ac-602b8161459f", "sighting_of_ref": "indicator--de247362-501f-4f33-a2ec-295756b0999d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc65dff7-f70a-44f1-9cb5-a5e519a0a1ab", "sighting_of_ref": "indicator--d67fd8fd-211c-4091-88d9-cbc11f6de0a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c685172a-f2bf-44a9-9c16-9f6c4ca189a0", "sighting_of_ref": "indicator--0f0dcc9b-86f5-4bd9-888d-cd29202ed070", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135af720-e28d-4e07-89c8-a37965d1c979", "sighting_of_ref": "indicator--d3130e97-78b3-4625-a0b6-3f35c5ba1f53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f608d70-c1d0-48a7-a065-cb6f556faf08", "sighting_of_ref": "indicator--490d5910-ce12-486d-b3ed-cff3f44ef500", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3355aea-afb5-49f8-b9b5-2d4c0509a81a", "sighting_of_ref": "indicator--da9aab7e-650c-4050-a810-93397980d68f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d199f78e-5a32-4cbb-b050-a79fcfa5a38e", "sighting_of_ref": "indicator--074526e4-326a-43b8-baa5-5f3f88bcc0f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747bc11d-b2dc-4945-b633-bffbdadd7260", "sighting_of_ref": "indicator--7359456a-aea2-4a96-be41-2de494939f08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e5b6d3-754e-4261-af58-bea3dec4e46c", "sighting_of_ref": "indicator--d4d45971-d396-4ffd-ba56-9df0e6cd3867", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738dd4db-ddfe-4aae-a58b-aa286f082bcc", "sighting_of_ref": "indicator--c7a8e771-5b76-4a27-8595-af51f5072923", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a08539-5b57-458f-92cb-2787270b1114", "sighting_of_ref": "indicator--20270587-e401-49fc-a0b7-56999cb89fcc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3512e86-854a-4db6-b342-c08c06520080", "sighting_of_ref": "indicator--8ca109e0-c241-4506-ad4f-fc02c00e794e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143ee583-e284-45dd-8f05-62c7a78d2dca", "sighting_of_ref": "indicator--d55d052d-1cdc-46d4-a1d1-a84191fe2afe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b8af0c-507f-4aa9-8913-bbba73176844", "sighting_of_ref": "indicator--e0b72045-1d89-483f-bd47-bf55d5af6a0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3546e08d-700e-4bc4-9542-5b8f5f00bd23", "sighting_of_ref": "indicator--5c8ba205-cd6b-43d7-bde5-373f631c7461", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e4cd9f-d47c-44d4-b11a-8d4f51aa2ffb", "sighting_of_ref": "indicator--e1c6e5e1-8b1b-4f25-a59a-21f58b41949c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d073742b-cd4a-4b06-8afb-c364ac6c421a", "sighting_of_ref": "indicator--6a746940-90f2-4134-808f-010fe10b0973", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517dcf22-43ab-4425-8111-2570f7eb6ede", "sighting_of_ref": "indicator--bf1e3fdc-5643-4e93-bb4f-f2ed82ce6c1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a27ec8-ca8b-4bb1-88eb-4984fff3e03b", "sighting_of_ref": "indicator--c3225b18-903f-48ec-8075-59bd788436cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e119fbe8-d3b8-4b7b-a73e-67fb7bb765c1", "sighting_of_ref": "indicator--ea4203d0-7bbb-4bfd-a0aa-aa0c6e082fa7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ee9f573-1213-47e9-b203-f471f4ad05ab", "sighting_of_ref": "indicator--33eed6be-4f9e-4498-8cd0-383f591b5c46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f9880c-f68b-4bd0-858b-0f775d56c3a6", "sighting_of_ref": "indicator--dedd0b5c-1ec5-4490-88e1-edd7df6fb105", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279f9595-d3c7-49b1-9671-d7dfc37e0623", "sighting_of_ref": "indicator--d4c42ed3-e988-4042-b8f5-bd8f4233a15a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ace545f-6dea-4e13-8150-5f02a801641c", "sighting_of_ref": "indicator--359693d4-1f82-49c7-8be0-e3f82c37a7a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14966125-819a-46be-b496-c6d0800e5319", "sighting_of_ref": "indicator--967cf649-502b-4ecf-a686-d6bedd67a1da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ee067f-7ff5-41c9-ad3a-3e4329ec051c", "sighting_of_ref": "indicator--e46f6045-5b77-4ffa-8ac7-24ea427f9fe2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a38892-437b-4968-b110-bea5b04df0d8", "sighting_of_ref": "indicator--bb17524b-9426-4145-9e92-bfdaf6754830", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c2fa77-0ca0-43f9-8afd-bdc27fd26c45", "sighting_of_ref": "indicator--7a45f908-e54e-4ef3-88ff-5fe8c07c4da2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131e832d-4b8a-4211-ac85-e5a4755ed314", "sighting_of_ref": "indicator--642f726c-f9dd-4cd8-a7f4-f908fea17c1c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a238df-bccb-41e0-82c5-7a9f8f890166", "sighting_of_ref": "indicator--4b6bbf10-0f0c-4b6c-8b6e-6d25e021b44d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b395d0f-a033-4a70-a4bf-18d18c08ef9f", "sighting_of_ref": "indicator--698ca6e6-8f3b-49c5-931b-b5699667177e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520c800f-1cb6-4294-a839-205fb5b6872a", "sighting_of_ref": "indicator--7c3fce91-340a-4214-880b-997caaa4f46f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfa23095-5c45-471e-bdec-9389c7ead498", "sighting_of_ref": "indicator--2253770b-94d6-49a2-96c5-c4825e001722", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adb6b85-ed3c-4ad2-9d3a-8c4dca4165f7", "sighting_of_ref": "indicator--27c237f6-15c1-47b9-b16c-951515e7c8cb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58e98b7b-0141-4351-ae4c-ef7d9933c2bc", "sighting_of_ref": "indicator--17ae70d3-b0c1-4820-b8dc-c79058b10de3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25577c61-97fa-42cc-b240-3ecacbaa60e3", "sighting_of_ref": "indicator--dbf17dd9-0068-451c-b526-300ac8dafc3b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3829a0-8d59-4642-9436-21ee54de902b", "sighting_of_ref": "indicator--5bb68abd-0fa2-4de0-a0d9-5c6231ece1d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952d7285-e0ad-454f-80bf-e36efe228fd8", "sighting_of_ref": "indicator--c70bc34c-81e5-4af7-8bb3-1951f3f791f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b4abb8-9478-42af-a573-b4632b1a1aee", "sighting_of_ref": "indicator--12a580d1-8f7a-4c91-874b-e196d6eca04f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5413f6fb-a9b5-4135-ae70-b1df66c6e122", "sighting_of_ref": "indicator--d4e5347f-32d3-45c7-b295-ac03fb634f5d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6984406e-976a-46b8-b972-ca3c64af291f", "sighting_of_ref": "indicator--3cc07e9a-c14d-4abe-872b-45bc16dac6b4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e8432b8-4e24-41f9-af6e-987cf3e839a2", "sighting_of_ref": "indicator--42fcb0f0-d8cf-4cf3-9311-e6fb3cdf5ecf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac72c828-58a8-4dfe-abda-e46d67ab0ae0", "sighting_of_ref": "indicator--6a9819f4-279e-4cf4-bc33-aea3dadc89e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64cc5ba-71f8-4e2c-a4b7-0825f7cec333", "sighting_of_ref": "indicator--80b9183a-f170-467a-a3f8-558e4e185857", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d79900-9b46-4053-86ce-c2441fe67d6e", "sighting_of_ref": "indicator--60b51328-b5ba-4ac4-bf92-1842fb345f42", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c35548-68fa-48b2-b761-8fc9635f999c", "sighting_of_ref": "indicator--a7f59113-3fe8-411d-85c3-bf8903f1593b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67548d51-7cc0-4a5e-8200-362e1fd15751", "sighting_of_ref": "indicator--d8d40a1e-b42b-4350-a4ff-e09cd2c1e108", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb9a268-5da4-4557-9c20-63fb5eb39e7b", "sighting_of_ref": "indicator--6054ae1b-36f9-4d13-9240-f3ad529d3bce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e6f1cc-a82a-4b7b-a041-aec9afcc3668", "sighting_of_ref": "indicator--be3e2172-2f5a-4222-b081-9b29a719888c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3f256d-b870-4077-b0ee-e6a930125167", "sighting_of_ref": "indicator--cc7fcf71-4a76-47e2-a766-e1e722f93516", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d75d144-a456-436e-8143-b776f3e57b88", "sighting_of_ref": "indicator--9d5f8199-dc44-41f3-8736-565232c26d0f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39978d6-64f8-4f15-8be5-bed01ffdb836", "sighting_of_ref": "indicator--0777d702-c14c-463f-846d-73242bca3825", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424599da-fee2-4428-b9f8-097b896604db", "sighting_of_ref": "indicator--7c4ffdf7-fbf6-4aac-9e06-80e72b80dabc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0daa13cb-d05c-46f0-bcfa-54f30326f87a", "sighting_of_ref": "indicator--23d0c427-7409-41d9-a851-072bf57809f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734a028b-6640-4784-a6bd-a20ed727163d", "sighting_of_ref": "indicator--86af46b5-78aa-4e02-bac1-d6a83567857c", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9354621-3ca7-43a2-9f78-badd06b4fbc9", "sighting_of_ref": "indicator--12940604-f6e2-425f-9172-63584c815ea6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db453774-7a76-448e-900f-d81c50800601", "sighting_of_ref": "indicator--46a7895c-f6d3-4357-a993-766c718e6575", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745747a8-231c-431e-8b90-b200e400adad", "sighting_of_ref": "indicator--fe90f0b2-c8c9-43c7-8ee1-248721a5ab2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0fb0f3-3810-49f1-84d5-5c75fd939473", "sighting_of_ref": "indicator--8bb5664d-0469-4b36-a754-6b0ce83b1303", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea33d198-7b97-4960-8f0c-a4a33e342e19", "sighting_of_ref": "indicator--cae2791a-eca1-432d-8364-92de25dadaac", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d9fc4b-a084-400c-9b2e-37345e0d8766", "sighting_of_ref": "indicator--017c06f4-fe8a-4809-9cdd-1f476b0f89f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812c6449-cc3d-422f-8691-1e5733570ba8", "sighting_of_ref": "indicator--b13f21cf-cbaf-4b56-97fc-612e4eba7263", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11810f73-3911-4079-87f9-a6fc769cfa43", "sighting_of_ref": "indicator--60878c23-d169-4c27-913f-3b841be69c93", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e9faaa-1cb5-4775-9003-0f9556044393", "sighting_of_ref": "indicator--ddc40a40-e508-47e8-af36-37819eec38d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85d481b-6bfd-463f-a0bc-1a7198b1a0e4", "sighting_of_ref": "indicator--d585fed3-1f7e-407b-98fe-4cde7c9b717d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27ddf3f-0789-4bfe-a6a2-f7c947c4fe61", "sighting_of_ref": "indicator--4b51ea2f-45af-403c-8409-acbfe07767dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e02d910c-3f38-4b83-92e1-7964f5862062", "sighting_of_ref": "indicator--d49cc268-31f0-4ee3-a1d6-12c8579bf66e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59763e68-c12c-46b2-a102-774be4b5aeae", "sighting_of_ref": "indicator--beaebef1-331e-43c1-baa1-f8fda6ecb3bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f8b250-9abd-47f1-b676-711b24f94e96", "sighting_of_ref": "indicator--4b779a70-8492-4106-8e56-185c188b3e18", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9ef4bf-e958-49a9-af78-b0f7dba7608e", "sighting_of_ref": "indicator--e34697ce-0b98-4fab-be78-361aadfc7e6a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2df038-42ae-4273-9fde-8d511941e32b", "sighting_of_ref": "indicator--c0bbd977-0dd4-4f60-991d-23720a1851d4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80dd898-5f6b-4106-b93b-b5b92fc2f89f", "sighting_of_ref": "indicator--008cd6d2-a264-4a67-8135-ac352aebb2ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d149cd7-85de-441f-bc5a-b4904d61926c", "sighting_of_ref": "indicator--6595cd32-5efe-4018-8309-10dbcb96f04f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9771c008-fcd2-431b-b1b9-5505e286ba04", "sighting_of_ref": "indicator--0a7783a0-024b-4cf6-9ec0-48892f4e45cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e49e415-0cd5-4559-81b3-595cdf89a17d", "sighting_of_ref": "indicator--2f8b13e7-ecba-469a-8af8-25ab7b90e291", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07eaaa23-0ff7-419a-8085-dbf001f716ba", "sighting_of_ref": "indicator--70681f93-259c-4f09-b602-84b9afccbb94", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da81e1d0-81e3-4bc8-b895-e84af115b28c", "sighting_of_ref": "indicator--6b04dae9-834a-400a-bea1-03cd0f74b494", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149973ab-234b-4c75-b034-c02e581a003a", "sighting_of_ref": "indicator--9a76c651-304a-41ed-8ba6-d80cc9fd20a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070ba3b0-7b6b-43d7-9de5-4a818e8204dc", "sighting_of_ref": "indicator--13d36a50-5d5c-44ac-9477-1f8b5801c9d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439f64cc-046d-4367-8765-f589a0f0ce41", "sighting_of_ref": "indicator--f16c50b6-8864-4698-b556-ef019ed43ae4", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f830567b-c46a-458c-a32a-fb6a05f68476", "sighting_of_ref": "indicator--a85f44be-7111-4814-8eae-49cae7120bde", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5155a53-d0e0-4694-9aa4-1cd5c868e0e6", "sighting_of_ref": "indicator--3a7bef58-9ea8-42c7-8897-3ddafb5d89ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594458bb-e429-4657-981c-05aebed985ec", "sighting_of_ref": "indicator--abca5ef6-28c6-42ce-9b5b-dc656329405a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7aa00e-5f64-45f1-b0e7-048795d4cdee", "sighting_of_ref": "indicator--557c866a-55c5-491a-9283-2168036ae54f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ec65eb-4c11-4d00-879c-3bec877d11db", "sighting_of_ref": "indicator--590c207a-bc36-40ed-b216-9bf3c49907b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6bf4b1-0a4f-4778-af35-55fcc017d020", "sighting_of_ref": "indicator--1bbbcd12-038a-43fd-8aa1-ce18bae91dd9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1871b136-3f31-4d12-a58d-c2cd580422ee", "sighting_of_ref": "indicator--5472f341-ef8d-462a-8174-b1942a9e909f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e59680e-a7f8-4e51-8975-c456613d26d5", "sighting_of_ref": "indicator--6dc4786c-bbfd-4bef-8697-e0829574569e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039937de-b6ff-4f7f-b43f-e682d133fe3c", "sighting_of_ref": "indicator--1f75cea2-2e35-4a49-8fec-ee615de85c81", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ed6710-a445-428e-827d-8762ba96677f", "sighting_of_ref": "indicator--8eb18faf-7127-4e61-8d0f-bcfa293956f1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--596cc8cf-0df1-4398-aea7-35fc15fd39d8", "sighting_of_ref": "indicator--13a6bec3-1719-49ed-a806-6a9521e5a573", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6643404-6ea8-4e9c-a460-334b18218a8c", "sighting_of_ref": "indicator--f458dabe-4f44-4aa0-84a3-0803388d7260", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28535dc-bc28-4bfb-a177-58de048933d8", "sighting_of_ref": "indicator--ebc426a6-8081-4eaf-be5d-fda17ed6aa4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1e24af-ae68-4272-8cbc-fdca1f1cfdd2", "sighting_of_ref": "indicator--c502b2cf-35ec-43ec-a53c-d8969f1d8b01", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc698b4a-aacd-4378-b7e2-f068b8b413a0", "sighting_of_ref": "indicator--8f44c280-0b74-4cab-9b86-ed34443811b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400fed70-da91-4b89-850a-168975001839", "sighting_of_ref": "indicator--35255def-621a-41f0-ba51-62e885d1d306", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3692cfc8-1a53-4679-9f15-b02057e88899", "sighting_of_ref": "indicator--f95c0ec0-489c-48fc-9ccd-9af8ef3ae30d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058c83de-9c99-411a-bdf0-49509ce0e3ef", "sighting_of_ref": "indicator--c42d0f23-ffa5-4dc1-a03b-8304b5cc8df9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bbaa98e-6ba0-4739-817d-f2ab3852a822", "sighting_of_ref": "indicator--0d700fc6-4a24-437d-b743-910f55b334fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280c1fa8-52db-41e6-9f49-c54f3de99e43", "sighting_of_ref": "indicator--50780799-c403-423a-a33e-68c89b50bae7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f0cc7b-f768-47be-a71a-0842b75b3f2c", "sighting_of_ref": "indicator--e3802af0-7909-45fc-9f4c-2a1864ce1ff5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9259fd5-1ede-4f1d-9129-a79604b60260", "sighting_of_ref": "indicator--ac95d536-e79b-49a6-912d-8c357e6a7a77", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f200e1f-303b-4b9b-a323-9f1f4266bb31", "sighting_of_ref": "indicator--3904b4e5-c67e-4ca5-902f-ac5c26142d97", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e8260d-e5b8-4ee9-bc4e-6345eca45ab7", "sighting_of_ref": "indicator--12db0fa9-d2c3-4bb7-a81e-5395b8b45b2b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0a14b7-9bf1-4b27-84b9-7d74399acbdd", "sighting_of_ref": "indicator--d8df988c-0619-43ef-9623-bba02a6fa07b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc52c3ce-4965-4e38-a987-dcdec7ed2c14", "sighting_of_ref": "indicator--e9894935-3e7b-4cb1-b2f1-4d2b2e046000", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdee9065-d44f-4e88-ac47-6f407689c350", "sighting_of_ref": "indicator--6e980075-f328-4cef-a4e9-ac4da0d02667", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc58567-00b2-412a-96e0-6305599f9d18", "sighting_of_ref": "indicator--6328b02e-3c58-4d3c-9a2a-2309ffdd0bdd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e9ee9c-d2ba-4375-bcdb-8b03165f6f17", "sighting_of_ref": "indicator--cf7e5f43-5d2a-4c26-bd63-3dc952ca5fc8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e76eb4-4d83-4e74-8f7d-34a37131915d", "sighting_of_ref": "indicator--61c11d2b-48a4-4f6b-96b8-abc3522c0dcc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e026b3-7af1-4584-b7a7-d988a982ebc9", "sighting_of_ref": "indicator--699912ed-9fb3-478e-8d6d-e59a652c3a58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4670d3c-12d6-4003-98bd-9ac7b6b7c145", "sighting_of_ref": "indicator--76d263ab-8607-4e5a-b95a-69a13ea64866", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdce72ae-be50-4c8b-af12-35480b34fafe", "sighting_of_ref": "indicator--ba12a8ba-4c57-4782-bcca-99ed7f08b8ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53cfa23-86c1-4989-b048-06f0adc09935", "sighting_of_ref": "indicator--17995576-2cdb-4d87-a69c-6f28d6f5e0a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a442d4d-77fb-4074-b4e7-172f3c4db776", "sighting_of_ref": "indicator--1de545bb-0da7-439b-a3f7-62130feb11ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b940d78-54ad-4bb7-87e6-a23e1f56122e", "sighting_of_ref": "indicator--a204f6ba-9595-455d-a50c-5aaa9b56b5c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1379f7a5-2b35-4a68-af8f-1baf97630746", "sighting_of_ref": "indicator--cf36be65-27cb-4b54-b35a-e32ef75b80f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab058419-7f07-4e83-a89c-de8de9fadbc2", "sighting_of_ref": "indicator--3b0928fb-71cc-42c2-a4e3-a4b240b33953", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41001d80-0315-49c4-bac5-6dfbaec40ddc", "sighting_of_ref": "indicator--b62d11aa-2d4f-43f9-84eb-202b6a974c7c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb2c9ca-e428-428f-85ed-6af8440bebde", "sighting_of_ref": "indicator--ef81c598-d846-411f-a9ee-f9571f7eeced", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c4dad71-be23-48fe-8b03-4c45b49d98dc", "sighting_of_ref": "indicator--fc4b0937-6e59-4f10-94db-dff1a17586cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25b8fde-58da-4f0e-9b5e-7dc980a17283", "sighting_of_ref": "indicator--1d1d4af1-c8ec-425c-a7ee-5ca5426c97d2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d9ac64-d389-41fc-a9d8-3def1075ec28", "sighting_of_ref": "indicator--cf188771-79de-4f7d-820d-4f5fc4ac4da2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6ada6f-9a86-4383-9e65-22ea799d09fa", "sighting_of_ref": "indicator--4cd3590f-3271-4bac-886f-58ec4674f00e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702a037d-7602-49e1-b2f7-12704ca79602", "sighting_of_ref": "indicator--10f0f598-34d9-43cc-8874-6299e599b1ad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bc72bc-fd1c-463a-b974-83d00079e7d0", "sighting_of_ref": "indicator--5732e015-881a-4bca-adb7-ee97e7876712", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b42c58b5-c351-49a3-a43d-5660ad461247", "sighting_of_ref": "indicator--74b1cedc-9b82-4347-9feb-afc74838c10d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1ac5fb-f4cd-4dc1-b50f-6a82b8c9a967", "sighting_of_ref": "indicator--613fc8cb-8638-411b-8eb7-d2a4f878eb84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df5c0c5-0f5b-474c-af4e-24dc0ee518ce", "sighting_of_ref": "indicator--b6e5becd-8a84-42d0-b695-c37fe1888d6c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ce1e10-5cea-4e2c-bc42-11187800f6ac", "sighting_of_ref": "indicator--73db47c9-d0fc-4fcb-b76c-86121d4257d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ede2de5-cacb-4a39-8449-931425c211a1", "sighting_of_ref": "indicator--8b3681bf-b267-4010-96c5-1f363d6b7bbe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f988e416-1f58-4c85-b461-acfd5cfd6d68", "sighting_of_ref": "indicator--0fbf89d4-b58b-4aad-806a-c86b815077fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9274431-983f-44c9-b252-98b43805ae53", "sighting_of_ref": "indicator--1b5c98a0-3188-4d75-8f4b-a43b2587f49b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b7d18f-c557-4b3a-8209-cea4a66b75cc", "sighting_of_ref": "indicator--b0583e79-c9f4-4317-af7e-d92ba454d36d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8011cde1-1414-4ee4-bd53-bf8af4147eb8", "sighting_of_ref": "indicator--c12313f0-0b0c-4b3c-90a2-3db5f5ef790c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7764ad53-5407-4372-8317-6c97a220290d", "sighting_of_ref": "indicator--3047be31-64ab-40c9-babe-8469756257e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421494ba-11c4-4d74-bb34-760baa39b4aa", "sighting_of_ref": "indicator--4197e33b-9478-4ed1-a391-80913e6d8219", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8fa195-66b1-4bef-8451-5cb2c5e8b3b9", "sighting_of_ref": "indicator--a08dc936-2b2c-4674-a917-459bffcb353b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9dd0f18-7002-453f-8b12-8931c5c0df6d", "sighting_of_ref": "indicator--7489468a-8d8c-41c9-9832-46f82d7613d9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c15fdd-d15d-4342-980f-46ba429ef16c", "sighting_of_ref": "indicator--4e7c6f90-75ab-47d3-904a-6c777d097b5f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9ad754-4319-4c1f-81ea-116e5a97f831", "sighting_of_ref": "indicator--27e452a5-ba7a-4bec-82d4-5a05042278e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83d75a5-ed00-442a-9398-3901bf1894b0", "sighting_of_ref": "indicator--53ea7dbd-223d-466f-a647-6e6eaa91c19f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85691483-46d2-451d-bdc2-c4df932c6f4b", "sighting_of_ref": "indicator--e7ffc855-dff4-411d-8c2a-ed03092fbdd5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1d7aa6-9730-4dfa-ad3c-afb8d91c14c7", "sighting_of_ref": "indicator--e0664ea5-3c98-4b17-89d0-8dd028dd6706", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d7fdfb-d77a-4b63-8432-aa2678e47f1f", "sighting_of_ref": "indicator--6a613b75-bce4-4cdc-92cd-952c2a28b7e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f60f50-8abe-4840-9f21-e834e74e8d77", "sighting_of_ref": "indicator--baeac255-4821-435a-ba3d-8deda8dbccc8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7c8008-2536-496b-805d-9eec6d19663b", "sighting_of_ref": "indicator--4a0b6ac0-421d-4503-a3ee-89348bbe5566", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d54f6b-2003-4b25-939a-a3d2c35cb040", "sighting_of_ref": "indicator--cf8442c2-9c73-4d2f-9257-082a76756d3e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a9cd64-9e59-4ca8-821d-ee276f0b2357", "sighting_of_ref": "indicator--7d55361d-b617-46d2-b7dc-4577f2c40b1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28478a2-e8ff-47e9-a70a-994e2278997c", "sighting_of_ref": "indicator--f6b61c9f-4ec2-4faa-9e99-9dec4fa28285", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619f0b9a-9073-4382-a1eb-547827f92054", "sighting_of_ref": "indicator--ce7c4110-f13b-4cc2-9f0b-9255cb0018d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b20b8e-d947-4817-8a7a-5afb7eae2dec", "sighting_of_ref": "indicator--67efc518-8933-4682-a836-bfb413652588", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bf024d-56b4-4858-b5c5-cb7efadca232", "sighting_of_ref": "indicator--cb4ea45e-6f44-4f90-8d96-d7f3665e00f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d8b219-3940-497c-a7e4-6662c34b8e8e", "sighting_of_ref": "indicator--fb7846ca-7d21-4eab-a097-4cb8c586e660", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14dc0763-2617-49f7-9b6d-e591b98d55fa", "sighting_of_ref": "indicator--69df5c99-5b4c-4984-9845-810061895db2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca8f6ecf-77d7-4e8f-ac42-e249fddc2830", "sighting_of_ref": "indicator--354fd60a-b615-491e-8d2e-8f9dee822b8c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f4675f-6e6d-4cd4-a8a0-08b48026ebd5", "sighting_of_ref": "indicator--d5c364c7-78c2-4e43-9cb6-de5d053f034a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65e464d-82f5-4cc4-b3cd-b97b5481e62d", "sighting_of_ref": "indicator--d5bf0370-4b74-4d35-88cf-dd9badffeb18", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1391d12e-da60-4ab1-95d5-f76a8262d530", "sighting_of_ref": "indicator--bad1f2f7-d591-4a05-8212-11cd9694fd02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fbda172-beba-4601-a1ba-89eee3b3ba2f", "sighting_of_ref": "indicator--09e57ad7-c8ec-4cbc-a3f2-13e6fccd52c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20006c3b-8700-451a-bbc7-5a1d9a49cbb5", "sighting_of_ref": "indicator--cc369980-802b-4af7-b171-608b23dc147c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bdb4f6c-8fe8-46eb-8fb4-ba072222929f", "sighting_of_ref": "indicator--3b5a425b-e233-4a7d-8ae5-130007bd3901", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c53815-041b-49f5-9f2b-89a48a78c071", "sighting_of_ref": "indicator--bc205e31-bb02-4284-885c-2a43c8b9c9dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4608be-7280-4233-8825-2c5db4475746", "sighting_of_ref": "indicator--bc205e31-bb02-4284-885c-2a43c8b9c9dd", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a580dd1-c21d-4234-a600-83cb176ad8ad", "sighting_of_ref": "indicator--a46296bc-f4c2-4f5e-b7d4-c560edbeb06f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cde232a-d8af-4312-b3ac-1556a8414a12", "sighting_of_ref": "indicator--e1fc008d-94c3-4636-b378-844ac0cbeb90", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc180395-8709-416e-8b9d-35e6a92809b0", "sighting_of_ref": "indicator--2ea5bd2a-ca7b-4e26-9a5c-32348edc2a57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ffc232-9954-48e2-96f9-d68f2d99beb6", "sighting_of_ref": "indicator--b22d5a3b-0eeb-400e-b9f6-ab04303ff3d5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c500af10-581b-4012-a4fb-861232c0bbb3", "sighting_of_ref": "indicator--4c4c275c-848c-4cab-a9bd-7760002e8546", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbfb480-1b3b-4009-ad76-762fe1f8d423", "sighting_of_ref": "indicator--91a87f03-5135-45d4-92c9-f73e7a723f06", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ba5482-0791-46a0-a601-d5e915ea1f2c", "sighting_of_ref": "indicator--aadc0a76-7303-4841-9656-bed3951bfefa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d00a68c-6aac-4d0a-89eb-fe02d0c27afa", "sighting_of_ref": "indicator--a151fada-42b8-44aa-81b9-e55249b82399", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6da9de5-1793-4b03-ba57-930054935ad9", "sighting_of_ref": "indicator--5c8150d0-26f4-4bc9-b710-ee05d42d0852", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98759f82-653d-4605-958d-751595de3614", "sighting_of_ref": "indicator--801debbb-6e81-4491-9625-686541dce8af", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fe589e-cc3a-431d-ad8a-b1ef88845fce", "sighting_of_ref": "indicator--a9d9f53c-90a0-4757-a3c3-291b30fc64a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6492a0-9db0-40fd-a186-955a6b78286f", "sighting_of_ref": "indicator--b67273ab-0f7f-4758-9a21-e680b8c117ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1a4c65-6b6c-48ce-9f1e-1dc86e3f926e", "sighting_of_ref": "indicator--3208fe8d-67a8-4e00-823e-6ed958189436", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f466046-6a16-4902-ade1-e763f92ad32e", "sighting_of_ref": "indicator--f5a39c97-8c40-43a4-8eda-2e17d614147c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f24156b2-918e-4b91-80f1-b0a74f49450f", "sighting_of_ref": "indicator--7c3c1c59-bb37-4c67-a1ae-2a1ca1393815", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb24b1f-aeb1-41e5-b677-b94952fc1c68", "sighting_of_ref": "indicator--a914db90-3194-49d0-a04e-f9e34432fd7d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c3fe27-6744-445f-b69d-245ca4d88171", "sighting_of_ref": "indicator--0dc6312e-2cee-4113-97f8-804a9e6ae8a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2897c8-af43-498d-b4cb-005cbe2ea923", "sighting_of_ref": "indicator--fe1db302-69d7-4ff7-9f61-bc3727d429fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6deb15cc-a063-46e7-a1ac-437357850a5b", "sighting_of_ref": "indicator--72e161cd-3352-4323-aa7c-8c2fe3b452b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a62a499-b518-4191-b9f0-26b2ef3c9351", "sighting_of_ref": "indicator--bf0ec9f4-1686-4196-a911-fc5c08f9e053", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ded8e03-6f69-46c7-ae4c-e50015b5d8ad", "sighting_of_ref": "indicator--b4e4e4b8-a74e-4f7f-9216-bdef3c015fdf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd595ca-22e9-4843-a7df-e6e33b23ed19", "sighting_of_ref": "indicator--477de23a-9862-4e95-9873-4f2d17582162", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf05490a-07be-477d-96f5-953776874563", "sighting_of_ref": "indicator--799896af-075b-45e5-beb2-db7e66f85bd8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d27aa22-4706-4837-ad07-f3dd7c7dd46d", "sighting_of_ref": "indicator--3300f67a-bdf0-46a3-93d3-69608eaa1b69", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2325a1e4-7fce-42f0-947a-e5c8dfd6554a", "sighting_of_ref": "indicator--670af077-d09d-4eca-9ada-bbc4d3d83ec7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14ad347c-733e-4a51-896b-fe6767d0165f", "sighting_of_ref": "indicator--4a56cfe5-a609-447a-8431-81d303fc3943", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac2d8ff-eba2-44c5-be62-6718fe011159", "sighting_of_ref": "indicator--ff3f9bec-61be-480b-8501-bc86a583c4e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3166c5fb-9ce8-4466-ae5c-643269fd19cb", "sighting_of_ref": "indicator--8011a4a0-962b-463c-8bfb-67c611dd8c51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29967bd7-62b2-4467-8a8b-1aee54459e8b", "sighting_of_ref": "indicator--3c038598-f6a2-4c37-84cc-6f063bf51bff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c5a0fa-daf3-4521-8a26-72cdbf5b5181", "sighting_of_ref": "indicator--b3d4b7ab-7160-4585-ae6c-e4b7b44796d2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76cb14b1-df56-4458-915d-dfb573eea9c9", "sighting_of_ref": "indicator--fadfc7f1-dad8-44b7-b51e-4900ab3179d1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b363df-edb1-4786-9221-c35a28af1d9a", "sighting_of_ref": "indicator--e19011e4-4f05-4272-b6c6-3b4adedf4141", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39aa0533-df11-43df-9fe4-f574c42fc650", "sighting_of_ref": "indicator--dfbf55c2-faad-479c-84e9-fda7c8df8755", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e634058-46e4-49de-9979-647582b3db12", "sighting_of_ref": "indicator--714c42be-4e54-4d36-94c7-e31cd9ba2c98", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fe5e93-0d36-4115-ba9d-33a195dc0161", "sighting_of_ref": "indicator--18fb2f1b-19b3-493a-9f3b-6aa1b52d7547", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5e07b4-f6f2-4628-a6e2-1dabb33c342d", "sighting_of_ref": "indicator--2f85961a-8dd5-411b-b5d5-69347f9123ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14128c99-905d-4043-bac2-741eb391820c", "sighting_of_ref": "indicator--460b8b81-7475-4525-ad5f-dcf33f9d9304", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35676764-06ab-47ea-8097-92ef92db53ea", "sighting_of_ref": "indicator--b00e9c42-dcbe-48cb-adf1-efdfdfd3ee96", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb18562-3cb3-4ae7-9b08-884dde7fad3b", "sighting_of_ref": "indicator--da8ba8a3-0959-48cf-9047-46bb8c6ff95e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cb3c2b-78f5-4fe7-ad93-42db3357158c", "sighting_of_ref": "indicator--45cd6b18-10cc-4642-9a73-b547a8e66ce9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4540c2e7-bd6f-4537-8bb7-9fc099fe453d", "sighting_of_ref": "indicator--1c240d69-f1d4-47fe-a7db-c4255a2750a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65f80fb-ea94-4a21-b26c-4d66f1cde245", "sighting_of_ref": "indicator--c6d6daae-718a-49a8-b5a1-2cd796ec20e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba9b718-bb69-4315-a5e2-2a39a6f6fe37", "sighting_of_ref": "indicator--5405ef90-a659-4f26-9583-80d925a21d23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c05a20-e76d-4fc1-a34d-e286e0eb4793", "sighting_of_ref": "indicator--4ff9a442-4f55-47ea-94ba-fc4182ad6e02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee5743d-4fd2-4f80-a9fa-3f4d205332ba", "sighting_of_ref": "indicator--381dc898-3ca4-4249-9db8-9231282de215", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39593e89-5fae-4349-ae81-716eab2fed51", "sighting_of_ref": "indicator--ddf40ec0-2b3a-4173-9ae3-58cd137425d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1179bbb4-757e-44e8-bac7-61f041e259a5", "sighting_of_ref": "indicator--755b293f-0b8e-45d0-8222-9a88376f3249", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85862f45-dfec-49d7-b5d3-21aa208a3306", "sighting_of_ref": "indicator--9494ad32-9c41-4329-917b-a887484b1dbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39ab7b5d-5430-401c-a9b2-7e3771ba8dd5", "sighting_of_ref": "indicator--c6eed5ac-d3c2-487a-9637-be8df75c8018", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf49e90-fbc5-492b-ae5d-0c1f08a0a08b", "sighting_of_ref": "indicator--62767422-dcf1-4d89-83a1-3776aa18c570", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47a4a78-4b8e-43f7-b2f8-a7f55e80e752", "sighting_of_ref": "indicator--a16c1055-32aa-48a9-8004-d7397d2300dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e08230f-507c-4e45-b08d-958d13fb9e99", "sighting_of_ref": "indicator--de53b524-cc10-4821-a056-9028b1022d7b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834d3a8d-6469-415d-bd1a-98125a519e72", "sighting_of_ref": "indicator--30cc3f68-4828-4b47-9f9d-455fe8ec90b4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7c2438-de9b-4e62-bf84-6478f1255a11", "sighting_of_ref": "indicator--db4fccf8-aed3-447f-b8dd-ed5af1056cfd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ea6aa5-3f9f-445f-a0aa-5250ea13a305", "sighting_of_ref": "indicator--5c689f56-c76c-4c22-8c93-41b7dca5f307", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78acb3ad-70d2-457d-8b6d-98226c6bb489", "sighting_of_ref": "indicator--13ad23eb-cf56-4a84-8bb1-31d7563bcfa1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebebdfe-ac62-49f7-b751-937e8a41679c", "sighting_of_ref": "indicator--e2ee2815-59b9-4030-b449-b41270fba986", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5e46a0-7acf-49a9-81da-380cf2420746", "sighting_of_ref": "indicator--8b64c3fc-dec2-46d2-abf4-eda2422024cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26a44bc-b071-4879-880b-06c7d917a08a", "sighting_of_ref": "indicator--2c8abd1e-9c21-4c2d-9812-883421aa62cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ececbf-b975-447b-91c4-165909291f96", "sighting_of_ref": "indicator--51137ee4-995c-481c-9ee1-b49ca374360a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1072ed8a-5ffc-476a-ad6b-45cdc2d47bde", "sighting_of_ref": "indicator--0e92b2ac-91df-495a-9ec3-5a8dc7310d81", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0afa1e-a474-4991-89b5-bbd966cb687b", "sighting_of_ref": "indicator--eaabaa73-5ded-419b-aa04-0fe9643d43da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798bc805-44c4-4cc2-b4bc-e38dfa286aee", "sighting_of_ref": "indicator--53190ece-6408-49b7-82f1-74426c197d84", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89b6d7f-bc07-495e-aaf0-3d5f56280966", "sighting_of_ref": "indicator--12be8236-676a-44d4-825c-69d8719977d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63cb1b7e-28f4-46a9-bb3c-677935287c8d", "sighting_of_ref": "indicator--8229d7fe-b4e8-426f-9949-3aeb1e97c776", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fad4231-9769-4676-9175-6917501619f1", "sighting_of_ref": "indicator--29ae2dac-d857-4264-a6c2-8abf627418db", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29102611-854b-40cb-bd74-94afadefef08", "sighting_of_ref": "indicator--991c881b-bd42-4626-8f5c-4fa73b850057", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca29531-f965-402a-a608-0ffbd7feac99", "sighting_of_ref": "indicator--b8c34900-375a-4487-9ef6-4552326afced", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a6ad14-50af-4922-8749-f391ab43ee60", "sighting_of_ref": "indicator--a71803d4-01ed-4a14-8a1e-31bba6b46116", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d958b955-c9c0-4e7f-bdc9-7ea03c6efd98", "sighting_of_ref": "indicator--674e9512-efec-4219-9ddb-4d2ec7d4d64e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69700ae-6ddc-4508-8e00-77243b47e05c", "sighting_of_ref": "indicator--248eba49-01f9-471f-950f-95e7483d315e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b67de76-ed9a-427b-96ff-5649e0f65f5c", "sighting_of_ref": "indicator--dc85e5ca-c38c-445b-beb0-27234c891bc5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c462f37-e766-4fc9-97a9-d62fd2cdf5b1", "sighting_of_ref": "indicator--3c36fd4e-60cb-421c-82ac-e8b93235dbd8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4c2202-ada5-4f19-940d-196e69d02084", "sighting_of_ref": "indicator--64591bba-adbe-4a60-863f-c5b4d47ac8d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c7134f-73da-44e7-82f3-59e2c2a77e93", "sighting_of_ref": "indicator--542a936d-4f65-4ea8-8e2d-f4dafbb7dd81", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273ab582-d19c-485c-8be6-3beb3ca0ef23", "sighting_of_ref": "indicator--982a6c24-c543-4890-9767-d0f4c52597ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed492f0-7972-48f1-b8bf-fe3502801d0f", "sighting_of_ref": "indicator--e937bd67-b52a-40e6-a325-2b62313ddb71", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b39c37-f634-4894-9965-20c054da44be", "sighting_of_ref": "indicator--55ecb19d-8999-4c59-8dda-d478ee32444f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c061b4-248d-4c32-a26b-ec3a945b94dd", "sighting_of_ref": "indicator--9a796190-6c88-4fba-95d5-b41fe66f4678", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cad2498-5cc0-4ddb-9878-224df8b1f144", "sighting_of_ref": "indicator--1660ac2f-dd58-4020-8565-0f94ffd785d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52cd328-21be-4bf7-a823-08a59dd12c37", "sighting_of_ref": "indicator--cc264f37-4451-432f-bb43-026b25834746", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79607eac-52f7-45f5-b0d7-242183b969e4", "sighting_of_ref": "indicator--0e6e5cc9-e35a-4646-bc9e-09f031cf3d96", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2923b0b0-9a56-48fc-afc0-bc709d1fd0fd", "sighting_of_ref": "indicator--7ace0b6b-54f3-4845-8535-796a4d3faf95", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39337d90-5c91-4a4e-bd89-0d9931db2f73", "sighting_of_ref": "indicator--1de442d9-fb1f-4171-9cdc-595f603e58d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe98264d-2c78-4690-811b-c4f3e8dbaf25", "sighting_of_ref": "indicator--ceaac199-ee42-49dd-81ce-2ae3a7ef157a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c86491-2524-4e2d-8649-1ea045f6893f", "sighting_of_ref": "indicator--40fb975b-381a-4db7-b9c9-aa55bb441636", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ca695e-cc1f-4d1b-8c81-ffce3c24130e", "sighting_of_ref": "indicator--0c779f14-7863-4bed-a7c5-2285011c2368", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4945d2a5-9612-40b0-a694-4de86dc6f47e", "sighting_of_ref": "indicator--7af27ceb-fc3d-44d2-a094-1285352ae8cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d2b0d6-a8bc-457f-92e1-766ab735ac31", "sighting_of_ref": "indicator--f9810f67-bbef-4f5f-ac29-bd034028cc9d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1f2e8f-de90-435e-bde2-dc237c4ceccf", "sighting_of_ref": "indicator--e670284a-1dc9-4039-979c-6c3c37513874", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b96637-a740-4052-af1a-8e1629863a74", "sighting_of_ref": "indicator--479d393e-d84e-477d-bcc6-c2f09ea7c397", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72be2bc-f018-400a-b052-3e63feaddd67", "sighting_of_ref": "indicator--6e36defb-314a-46de-ace6-d62781008ec3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dd7fa8-d07a-4a81-a8f3-1cbacf9647c8", "sighting_of_ref": "indicator--181a28af-9e1b-4da0-8e63-69fc059b1f23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3a467c-c084-4faa-8df2-adf277c59f8d", "sighting_of_ref": "indicator--f447cecc-e312-4ac3-9d75-23645f7a8c55", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0957eb5d-d733-4803-aa4a-1283e2505227", "sighting_of_ref": "indicator--1dbbd42c-4c7d-46b0-ac89-374e409e4c00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bddf6d9-cf16-4396-a06d-9da987c21902", "sighting_of_ref": "indicator--695daab4-c29e-43fe-89f8-7ed2f77adde9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb45215-9987-4f81-83c0-d3e6a42d26a3", "sighting_of_ref": "indicator--3d98e4eb-f731-4b62-9270-71b584a7f3c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dec58e8-dc32-4866-b978-b291c28e8dda", "sighting_of_ref": "indicator--00254cbc-88e7-4a2a-87ea-2bc1508b5667", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db35f593-b799-46b9-8db9-ee5838e87d22", "sighting_of_ref": "indicator--511cb801-cc82-4795-b3b3-7e7c247ccae6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3023b2-da4b-46ea-830c-966750cfb8b6", "sighting_of_ref": "indicator--eecf8301-b110-4bba-b1a1-0c1eb2ac0f75", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cec454-765f-4ea4-93e0-e13a005db6d7", "sighting_of_ref": "indicator--6fbea31f-9a58-4dbd-a0cf-0797144a2d4a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56648551-e580-4347-b8d6-7e55a84ca472", "sighting_of_ref": "indicator--3731d883-34c6-4216-aaad-bd9992027cd7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d27ec2-78a8-4335-b0a5-63cd02ccbc47", "sighting_of_ref": "indicator--2a62206a-95ab-44e3-b4ed-8424dadab3fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6401a4f2-4446-4614-8733-fcd6ac35bdcf", "sighting_of_ref": "indicator--4ea23d4a-5f33-4f81-bd4e-d7e23fbd8436", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218712d3-007b-44c6-a4cb-09b646d411c6", "sighting_of_ref": "indicator--5544f928-0761-42b4-884b-9a22cb82bd26", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4846df-3da6-4583-a2e0-130f2ec1a776", "sighting_of_ref": "indicator--15d73f95-6129-4835-8678-ec38ca135db8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--836e04ec-26ca-4be4-8928-0888a5bc8126", "sighting_of_ref": "indicator--dae7ed43-aefc-4fae-9292-dcf50abe5d24", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f54177-418e-4659-8cab-2974c7b941f1", "sighting_of_ref": "indicator--ed0efb23-a99c-427c-a012-3b9ee712bf16", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b07d22b-bac7-4902-8c23-6e1cd36c2794", "sighting_of_ref": "indicator--3f619f11-553c-4084-b1c3-b382591bdb36", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8724ac0-0728-4071-a16d-53aa3bb87d78", "sighting_of_ref": "indicator--12a8e42a-3601-435d-9d3d-25259e5423aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39145193-7c19-4977-b959-cbd4a429d10f", "sighting_of_ref": "indicator--0a5817a7-e938-44f6-8a40-41675dc3c7ee", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0168f373-2d18-4325-af52-6fc2a0ac5bae", "sighting_of_ref": "indicator--4f1ba401-9aa0-456c-84bf-10138418aec0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663dcb89-9099-4662-b0e4-11434d853d2c", "sighting_of_ref": "indicator--b126181a-4946-4f0a-902a-9c15623efa45", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b8bb0c-331a-486a-9930-8b1ff7994f1a", "sighting_of_ref": "indicator--fc2cca9e-1ac6-4dc5-8018-bbece016a109", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbf8cac-2030-471d-b662-1c9aa5ae60d3", "sighting_of_ref": "indicator--d1e9fa4e-a51b-4b32-a88c-d11c922f30cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff9ce74-46a3-48f9-a4be-40f962ef0f06", "sighting_of_ref": "indicator--72815a9c-6d29-4809-9c6e-c87ceb863455", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa0611c-f792-45a2-b8fb-33be468aaf14", "sighting_of_ref": "indicator--d091d771-bb62-466b-8751-365bc182d185", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87771124-ba21-48ea-adf8-b49c1bed3b7a", "sighting_of_ref": "indicator--f8abd827-8547-4859-9ad6-d2368d179300", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8ff95d-ce0c-488c-b492-87ec0d7af8f0", "sighting_of_ref": "indicator--b2b75324-4fbe-4045-92be-56bd53b5f517", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16524f36-9804-4024-9b0f-4d4e51e6cf29", "sighting_of_ref": "indicator--22e720cf-1325-4847-8a91-c97ddb3d058a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e56c95-ad4f-439b-8ba0-66d6b6805b0b", "sighting_of_ref": "indicator--54b78513-c2b8-4bdf-bd4c-57bebc6ca49c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd167ae5-ddc7-41c8-a98b-0de1763cda38", "sighting_of_ref": "indicator--3ef469e4-64ca-4658-b1ab-dd2903529bd9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6793d09-bd82-4eb0-ae03-c8e2caa90cf5", "sighting_of_ref": "indicator--1d8e9e6d-defa-497a-82bd-9d46c04cae09", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0473d43a-61ed-4e94-a2a5-7034dc08cae1", "sighting_of_ref": "indicator--e56f1f26-34b7-4f94-a511-4105f37e06f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828c9ebf-6ff0-4e85-9f5c-af227174199e", "sighting_of_ref": "indicator--b69d5c2c-e778-4721-bf55-69474c170a83", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc0812e6-a3d7-447b-aa76-926b65ec8201", "sighting_of_ref": "indicator--ff3a0079-9b2a-4e1d-a572-371f91b521e2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--618fb3a8-d1cc-4569-8654-20908e6cb568", "sighting_of_ref": "indicator--e4fcaf69-b5ea-4215-8674-c20dd97e79cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe49eabd-5195-4c92-8ea3-1c6ee4f7314e", "sighting_of_ref": "indicator--60d6d22c-88aa-44f9-9e28-04d8ba01a05a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df5579c-ff2e-48d0-810d-ce84a87cbbaa", "sighting_of_ref": "indicator--cac1ae4e-d43b-4567-ba54-da3dd08e6f7d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cc9d0d-9d76-4a22-8fad-8403ce7f6d67", "sighting_of_ref": "indicator--ff5e7d44-7b45-43d8-afba-8dd2d29129f1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8072f33-3b26-4ef8-bf67-ff8b56c6d861", "sighting_of_ref": "indicator--817bab0b-f1d8-4a98-b270-8f9408b42742", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beeef24-0647-4001-bd8b-872bfaab3636", "sighting_of_ref": "indicator--84514b80-f648-4fd8-a0bc-c3d6b97b3456", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e635f4c6-0cbf-4f3b-99af-509c654838cc", "sighting_of_ref": "indicator--b488a88f-d7c7-4b4f-856b-480d03c6b097", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca140075-b1fe-4619-a021-8c38f1a805b7", "sighting_of_ref": "indicator--56f3ce03-47de-4775-9a79-3766bcd2b1a7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee94bf4-8c05-40fd-9507-62329031a602", "sighting_of_ref": "indicator--7e1adffe-d97f-43bb-b0d3-2347e4925a7a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c75e5d-0b16-4d48-be32-e27dc9bf7c5a", "sighting_of_ref": "indicator--25c48d8b-4485-4353-b66c-3678871bf1c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e10020-9297-49b3-983e-43a1ad60ebd0", "sighting_of_ref": "indicator--c992477e-f653-4e1d-941b-6cb45d01d844", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a941429f-69b3-4374-a707-5ceb059a6283", "sighting_of_ref": "indicator--473c3e60-e0d0-4134-a045-d9135ae44318", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12caf9f2-3015-42a2-aa29-99dad5fc571d", "sighting_of_ref": "indicator--e363d775-c18b-47f1-ae8a-b916dc949f91", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c3e414-30c4-489d-8b67-ee568a44bf11", "sighting_of_ref": "indicator--e8f520ef-cad4-434c-9810-d90a736da25a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8d1e35-b144-46a3-b6d6-28459c583207", "sighting_of_ref": "indicator--9904a540-8d14-4ebe-bb4b-45b38c9c3edc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5796a47f-cf4a-4663-a43b-0c0049c2a86e", "sighting_of_ref": "indicator--cd1513e2-a217-4ba2-ae50-7dd9f7794781", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bab4a4-696f-433c-9ebf-99e0f77965f7", "sighting_of_ref": "indicator--2d788b1c-b252-4339-be60-58fe363cb2da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7933792-0013-4051-ad27-2ab84a36cb2b", "sighting_of_ref": "indicator--6031f20c-6e06-41fd-8ed2-af4fc7462541", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defb7b63-8817-47d7-b66b-eb084ee91712", "sighting_of_ref": "indicator--0a59865b-03bc-4305-b0ed-360a36f1dec4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e37a967-6b83-4b1c-abee-4d8580858c85", "sighting_of_ref": "indicator--4a15a6fc-d63d-4c7a-b174-fd664405be08", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338634f3-f17b-421f-bb8a-07cb123fd548", "sighting_of_ref": "indicator--08474934-c0e8-420a-85f2-9fb3fb4cd912", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3a876f0-77b0-431b-b615-b3e507eb934c", "sighting_of_ref": "indicator--660775e3-bb67-4356-9aa6-79dd3c408aea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d210feb-cae3-4109-b9fd-0029a6116dea", "sighting_of_ref": "indicator--568dc27b-7afb-4828-87e1-a6971e4efe36", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb25fb6-24b9-4e4b-ae37-4e1b717d0fd0", "sighting_of_ref": "indicator--7499f2c1-6fbe-4ba1-a53d-69ce3a5b2b39", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a205f08-e69d-4df1-a47b-a152147c5e3c", "sighting_of_ref": "indicator--b76ccdd5-a412-4f5c-acee-4d2467e3a321", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dccf010-21b8-49f8-a04f-025e590c3528", "sighting_of_ref": "indicator--12b16e40-18a2-44b8-9f03-209ddfa8d157", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2964ef-0269-4fc9-af67-2bda0bbead56", "sighting_of_ref": "indicator--4d6fedb5-0d73-45e0-8086-b238356ab611", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6013abda-0473-4b71-a9ca-4a0baf3870fc", "sighting_of_ref": "indicator--445207cc-4205-4a40-946e-9be55b31e8a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9baa8d7d-f591-4a6b-876e-f66f00930781", "sighting_of_ref": "indicator--ca123af6-3231-40e9-885c-306b15452832", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a82adc-f333-4e58-a4e7-9844bf41a844", "sighting_of_ref": "indicator--6453d749-3c5b-4649-9a6a-6ed60a6812ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1614614e-ef8a-4b18-90eb-c0f349313e0b", "sighting_of_ref": "indicator--c49b4881-92f0-49eb-bfa4-9ea99eb67447", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f81ad613-cdb1-4534-9744-e80c583afb13", "sighting_of_ref": "indicator--af778f0a-2a09-499e-aa62-eb06090ef1ed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6227f1-5e29-403e-8d61-a7c09a01c238", "sighting_of_ref": "indicator--78e9c102-5c79-4dbb-89e2-b65d8adf68ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d54ce917-00a6-4ecf-ae17-404029262a74", "sighting_of_ref": "indicator--05466d88-07d5-4de3-8d5e-668fd8930572", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cd3bec6-a7eb-4c6d-b1d6-7daef49bfa8d", "sighting_of_ref": "indicator--d0afeff0-d2cc-4a87-997c-a6461e281135", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800b7c39-4e1c-43b3-8069-69d2b904d8b0", "sighting_of_ref": "indicator--efa4b175-bdd9-469e-a181-36bd850a56ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a90750c6-36d1-4636-85dd-31a78e8134b4", "sighting_of_ref": "indicator--3d6e911f-4bf3-4c20-9a6b-ad4357136233", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b0270c-814f-4f83-b091-8c8ef8be415d", "sighting_of_ref": "indicator--943b3da0-f52c-4036-b04b-624c9ffdaafd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7837c9ab-33bb-45ec-ae95-656344097d15", "sighting_of_ref": "indicator--504bb665-e678-482b-a992-23121dc4a948", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0990741e-8342-4694-a8d7-9c0b4632f791", "sighting_of_ref": "indicator--e59eebae-52cf-4469-ae62-128a37ea8caa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d3fa3f7-cc5b-4dfd-ad3e-d248643aeb6f", "sighting_of_ref": "indicator--073f0ebc-ab8e-4ec4-bd80-7b1e32de3fae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a390c997-0cf4-4df5-8009-c28594e4ecd5", "sighting_of_ref": "indicator--333235f4-8eaa-4121-a20a-93453104d926", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ef24f2-b5a7-4d03-85a8-54d1d54f52cf", "sighting_of_ref": "indicator--c6d60ab4-befd-4f5a-b31b-eff59e39fff7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6440df-6262-4c20-ac3c-ff3295dcd8eb", "sighting_of_ref": "indicator--ec20fc42-e0f9-44b0-a886-2ce2bb97d328", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26811b86-0bc1-486d-8727-53410cf1c804", "sighting_of_ref": "indicator--efb990aa-6c76-4a73-acbd-65aac78b5478", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d68d969-1a2b-4479-bc65-735a34989343", "sighting_of_ref": "indicator--6af4a760-6263-4775-a7ab-20b3df0fedf6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e3859a-85c4-447a-98c3-015ea09b16bd", "sighting_of_ref": "indicator--9bd88ba5-4129-45a7-93a8-5307fed068d4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05e90cf-9754-4e09-9b3f-9731623da131", "sighting_of_ref": "indicator--0895ff24-7262-4db3-bf16-1a02db557f41", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd6a4a1-6dd7-41bb-816f-e5f4e384634a", "sighting_of_ref": "indicator--2fa2ad90-9b11-4a7f-9cd1-cfd46b6ecdd9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ff8296-da72-4297-955f-96233e6e81ed", "sighting_of_ref": "indicator--c4b5c758-8a09-4549-94cf-c3ca29670c5d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f472a409-8ad4-4dc7-9327-e215201ff00b", "sighting_of_ref": "indicator--e2e8bb23-71d9-4ffa-bec8-1ac3eaef6ebe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55d941f-67ed-4f78-addd-e2a7527bcc6d", "sighting_of_ref": "indicator--26c6a7b9-8d84-4ad0-ab86-c6ea04e3d03c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7733995-8f7c-41eb-ad97-1ced5eff2b16", "sighting_of_ref": "indicator--82eae10a-80ba-43d2-8186-e0726a41148b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8966d1-fd34-4de4-aaa6-0c24623b3987", "sighting_of_ref": "indicator--966cb844-a65c-4286-a7ca-b61c6ef0592d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd61f666-82ac-4f04-adff-e97c79d6a7de", "sighting_of_ref": "indicator--3d13f07d-10bd-448d-b10e-e51562a19844", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6364ec93-67e9-4152-addb-42af67981977", "sighting_of_ref": "indicator--0cd61106-2da7-457b-bfb6-f8c63e6287e3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87676d34-ba6d-4629-b419-bf9512feffdb", "sighting_of_ref": "indicator--ebe6678c-0367-429a-ac5b-cf1e2392bbb4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc46af5f-65ae-4ab3-832c-59eb5fba181f", "sighting_of_ref": "indicator--6b8c253e-e3c9-4d8e-8f50-9c823cd43486", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81603cf3-bb1b-4b3d-bf8b-164b802d305b", "sighting_of_ref": "indicator--b55df42c-7c3d-4da2-843c-411976f50618", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b28e705-3918-4dde-a890-4f84aa55c905", "sighting_of_ref": "indicator--34c50121-59e9-4d96-a477-114c84cf7071", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6792bdcb-12c0-4787-874f-d8ca599b8abe", "sighting_of_ref": "indicator--3afd01fe-45c7-401e-825b-29a46eac3f6f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203d9216-ae14-4065-ac0e-c755382331be", "sighting_of_ref": "indicator--0195aeaa-b800-40ba-b43b-6cfd027cc7dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2865e1f6-e562-4549-8da4-aacdd9cd17a8", "sighting_of_ref": "indicator--b65c343b-2110-4c40-a546-0ef73066a0e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9425e08-386a-43a1-b10c-7c95bdafa78b", "sighting_of_ref": "indicator--ebe9f769-22fd-4b40-bbbe-deb829e41b39", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49616d5-e2c5-456a-a4fe-8147da401ca8", "sighting_of_ref": "indicator--24894dee-8b53-4b35-b8c4-aa21119c7c0a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6582f261-0f23-4c57-a91a-67b70c55f0e5", "sighting_of_ref": "indicator--0bae9c59-4532-415b-8ab4-406e03a8ecfe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6755cabb-efca-4492-99d1-5b1cae5e18de", "sighting_of_ref": "indicator--a0993aa7-0da6-441d-9b03-06cf66be358b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a1f5bc-7636-450d-a0ea-6bb4f9130054", "sighting_of_ref": "indicator--7774bee9-96de-4dea-8b0c-bbfa363c69d5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9023185-4cf8-4164-9e20-33c83c7f08ad", "sighting_of_ref": "indicator--c1c62e22-5fc8-4e50-b4df-d328f876cd67", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5c2a0f1-6d01-4c7e-b3f0-4c53865129f2", "sighting_of_ref": "indicator--1576f100-beda-411d-98df-bab04bf9ff2d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d91f81-de7e-473f-bc4b-e11d9aa955ab", "sighting_of_ref": "indicator--d23b7909-0322-40b5-ad0c-91354d65aa8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31b06c5-72f3-46f8-9d8e-2ec8374c5467", "sighting_of_ref": "indicator--49b929a2-ac1b-430c-9539-6a87bf7373ce", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea85c4b-bc32-462f-adc1-ffc501adaa84", "sighting_of_ref": "indicator--c9f81756-8f21-4443-ae53-09e4db3a2e91", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9978d9-d04d-4b96-b757-70c0c17a079e", "sighting_of_ref": "indicator--35527829-a8a5-47be-98eb-974338a228b4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f220a3f1-677d-4124-8a16-74bb73a7342a", "sighting_of_ref": "indicator--df674a49-c8e0-4a3d-b54b-50a441c193b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4fd0b4-9ded-4e2e-8801-402256554db7", "sighting_of_ref": "indicator--9aaf47a2-096d-495e-8975-a056f253327f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8145b4ec-ba11-4b9a-b3ae-64b833808e0d", "sighting_of_ref": "indicator--567d03b0-d6b8-4795-b760-bda4ec5ea87f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf92c1a-e81e-48dd-9f48-25d666782c1e", "sighting_of_ref": "indicator--4312ce11-cbc2-40e4-b616-9a4fb9d81ab3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197b9916-d32d-4552-8024-886b84a8c1a2", "sighting_of_ref": "indicator--0f343b48-d800-489f-bc6f-fd071c4bdc29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1883c213-fb38-4776-bf53-185126cb75cb", "sighting_of_ref": "indicator--351f19bd-0cef-43be-982b-503b325244fe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2608bee2-4949-4c02-b991-57cc3952c2b1", "sighting_of_ref": "indicator--a204d27a-94d0-466a-a669-bb11a5d62889", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfaa863-5595-4d7e-9e4b-ddd0ea980d63", "sighting_of_ref": "indicator--06655b6f-169d-41f5-bb41-cf5603c801c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94733680-9d8e-4e06-9772-4b56afbc29ba", "sighting_of_ref": "indicator--c0ce9d17-9cf3-48e1-9bcf-5b78a07b0071", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb603f3a-7d3a-4ad7-aed5-6127cb7e978c", "sighting_of_ref": "indicator--f77dd7a4-8bbc-4dbc-8730-4b5dd9aec0ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d32cf57-e788-4c57-99a4-3ea18b422b96", "sighting_of_ref": "indicator--78610a26-6b5b-4140-ac42-3e8bbc1155c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b400cb-013e-4de0-941d-14d331244fbc", "sighting_of_ref": "indicator--fea3257e-9465-4543-ab06-0196ce5966e3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0ee828-aca4-4f19-8d95-0df47a8d572b", "sighting_of_ref": "indicator--e035281f-71f7-492f-ae63-99e1404a7f27", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df708b76-b546-4496-881e-f6eba84906cb", "sighting_of_ref": "indicator--7444a0b8-ce92-415c-81f7-d36138b91e36", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fadddf0-bc2f-45c9-b575-e70dc2fe0649", "sighting_of_ref": "indicator--99226b32-1e74-4eed-990b-2925a3a8e133", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d382ca-cd60-4f7f-aa63-674ca51926c3", "sighting_of_ref": "indicator--edcc8112-0f2c-4484-8354-8b6659589581", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0caec486-2315-4f48-9e6e-b0d4ac379b25", "sighting_of_ref": "indicator--166cf69f-c965-4887-bee3-a9086f8fad30", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4371b2b-e0f3-4281-97f5-5e64f24d9453", "sighting_of_ref": "indicator--93600801-80fd-490c-bb72-04a02fedbafc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa3d605-8b1e-4053-8967-4b490d125ed8", "sighting_of_ref": "indicator--27e1fdfb-efb5-4c59-b725-ce0178ee3bcd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d102f8-0321-4f2c-8797-5de4cda2ad89", "sighting_of_ref": "indicator--756728a2-24ff-4ce7-90b2-a4f3e60d1598", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0753c20d-c0f4-45f2-9296-ca9b5333c228", "sighting_of_ref": "indicator--3e832544-471e-428e-a4ff-60fe6210f2e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2426dc6e-4751-4d41-89db-b51dcfb8fb13", "sighting_of_ref": "indicator--f6936a2a-f783-4071-ac56-d58a487fa1f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed25906-e9ca-47be-97c7-bff96a9f2326", "sighting_of_ref": "indicator--48f63458-679e-45f8-8db3-4e87450b2a22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdb09d1-96b8-4c19-9b95-166af192d49f", "sighting_of_ref": "indicator--b29d265b-f80a-40af-b62b-a3a6c3f09b93", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc3f79e-0779-41df-a905-c81c8bb04151", "sighting_of_ref": "indicator--80c08de0-af99-44d4-a3b6-f9378d58f262", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e781318-03b3-4970-b529-0ae413432289", "sighting_of_ref": "indicator--ab63bba1-513d-4b49-a601-64690bedb3c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45bd4f5-2924-4a0e-8570-0d128844688f", "sighting_of_ref": "indicator--1aed382e-6a19-4531-9199-b084b0454c43", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e18ca7-c525-49d3-b2fb-d6782f97da3c", "sighting_of_ref": "indicator--5045b078-fc95-4dcf-bd60-b5a4b2ee6978", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddc87ea-0f4b-4b6a-b790-99821ca312a7", "sighting_of_ref": "indicator--d9b8c1f6-9f95-43f3-9869-00bc057f0756", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc5560f-476d-4ec6-bb7b-afbb98ceb646", "sighting_of_ref": "indicator--7a019b01-8c35-4559-8e29-f846e1cfdf86", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d456d287-3a70-4335-8244-f7198231a51a", "sighting_of_ref": "indicator--3b02ed52-c447-48d3-8771-1e9e64b7960e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611b5b18-5de9-4fc7-b6bd-3961bbd375eb", "sighting_of_ref": "indicator--53e93003-3a88-47a5-8fe8-166c77873981", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9fc36dd-e51e-433a-8425-cbd2d4a67b85", "sighting_of_ref": "indicator--f2f8853d-c61a-49fc-8d2b-07e3e7e10366", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514b7a32-df12-4694-894f-6859803e34d7", "sighting_of_ref": "indicator--2feb057a-7702-4dfb-8d70-59730e42a85a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9954e7b3-b3a0-4ae3-b7ba-2760d471ea6d", "sighting_of_ref": "indicator--8c57ffa3-766d-40eb-82cc-8469b16430be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a8c6fe-e8e9-4856-a9c1-aeda3e07b499", "sighting_of_ref": "indicator--bdef740b-4620-4cef-a40c-5781e62829b2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb998a2-5006-4ad0-b168-6a7e3d42871d", "sighting_of_ref": "indicator--a418ec1e-c4fb-4aeb-97a7-96fa05bd6bad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af3dafd6-725e-495e-b105-89ac79c795d3", "sighting_of_ref": "indicator--cd4b5b1a-cdcb-4f3d-b406-82334c94cd5e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c2c566-b3fd-41d6-99bd-88f1b3c682bf", "sighting_of_ref": "indicator--6cfe2965-e110-4db4-8dd3-5510dcfe8472", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d70a73-a71f-4e6f-ad17-84046d0d0dae", "sighting_of_ref": "indicator--ab80a8c2-49cc-44a7-9639-c056854d3bb7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0993c6b-3ac3-4928-b91f-62dce1f0c664", "sighting_of_ref": "indicator--e3eaccec-37c0-48ac-9782-61d73eaf96d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a3a366-dd35-4bef-86d4-c47b23515dfa", "sighting_of_ref": "indicator--310fe329-4063-48e3-855c-29aa38626aa1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f48ae3f-86f9-42d5-8baf-4617a7d241d3", "sighting_of_ref": "indicator--183ba511-3726-4fa7-a73d-dbb99f0bdfa1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65404e47-b235-4980-8495-074ae4c9fad8", "sighting_of_ref": "indicator--76436393-5403-4bfa-8863-1770ae0e4464", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a034b9f-28dc-437b-b1ab-3c15e8d99a1c", "sighting_of_ref": "indicator--549163cc-3ba4-4126-ab3e-e5f63f6431c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0011ad49-efbd-4e00-8277-a512c207cabe", "sighting_of_ref": "indicator--841c06fb-438a-451a-8a71-01bd396b9a12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de428a70-7317-4dd5-a278-572fee6fc4ba", "sighting_of_ref": "indicator--7c869098-18e7-485d-988e-6441df507019", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d433ba67-e222-4b50-9ccc-0bf1441ecc3c", "sighting_of_ref": "indicator--8f001751-40d6-4f13-b072-aa1bfe3512b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e141e57b-4864-487f-be9e-962917bf26c2", "sighting_of_ref": "indicator--de9e168c-6978-4c52-9f60-305850571237", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9417b0e0-a6ff-41d0-b924-29f47875a8a9", "sighting_of_ref": "indicator--9f6d6d46-8dbb-4878-a9f8-d4b2b2920cd9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9e614d-824d-42af-8494-d11990c03df5", "sighting_of_ref": "indicator--1d0a172a-284c-4b07-8f6b-17f58dc0d0aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a545a6f-e436-4cbf-996c-5253e780e16a", "sighting_of_ref": "indicator--5183db07-9f59-45a1-b7a9-f4dfc963e2cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3bd184c-8a69-41fe-9218-80b15a4563d3", "sighting_of_ref": "indicator--b0720246-def9-42ed-ac8d-308b85c70624", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6940bcd-dbc3-4595-a68c-81b7a4046c9f", "sighting_of_ref": "indicator--e07fb598-f35e-456c-949f-268c6d1d4229", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534a3ad9-90ba-4136-8068-d2c392499eb1", "sighting_of_ref": "indicator--84355e82-e6e1-45af-a3cd-9cf847e79a04", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f44d8e4-64df-48fc-87d4-307341f3455f", "sighting_of_ref": "indicator--11baa36b-8c01-4c8c-b6f7-7c02624e275a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d20395a-1521-4ad4-8671-5a255c5e2af6", "sighting_of_ref": "indicator--c83c0603-8f14-4652-bc17-c37f715e8376", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73016a4f-11f8-42d5-9658-fde43ad4662e", "sighting_of_ref": "indicator--ffbc2c73-eca5-4673-b61c-6934a5b17c1b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489bf6aa-a554-469e-9ee0-400564ea5a8d", "sighting_of_ref": "indicator--62768205-56ce-4c3c-be63-8ed1df11f156", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e65c5f1e-f066-4173-86f8-858ec56720e0", "sighting_of_ref": "indicator--10cbd613-2bad-4774-af31-173a47bf17fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a921adf0-3ae4-4ac1-8cfc-3c5d66b280e9", "sighting_of_ref": "indicator--97883330-9616-42da-89aa-ac3e94360459", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f46944-836e-4a1a-a60a-0a561fbdf33e", "sighting_of_ref": "indicator--f279ce6f-223f-485c-9ac4-cce83134e71c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf484b3-4f34-4033-9379-249053ec60a2", "sighting_of_ref": "indicator--d3657180-6704-4d4e-ba97-9ebfba3ddb7d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b6d978-b9f4-4c04-9d73-dc476a9b9a2d", "sighting_of_ref": "indicator--3d441581-cd0a-4af0-9da9-c72935ebe739", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6abf2f-d024-4332-af19-14f19979d0f5", "sighting_of_ref": "indicator--f6dfdecf-453f-4bc7-a3bd-ae96f3ea4266", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa9feed-4afa-4a2e-a4fd-191ae97b49ad", "sighting_of_ref": "indicator--42ed58f2-7303-4267-82b2-08095680f991", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b96f76-6d1e-4551-997b-da779060e5d0", "sighting_of_ref": "indicator--a795fd77-8be3-4654-a667-5727ac2bf02a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a91122-1af8-4da5-b8c5-64de68601160", "sighting_of_ref": "indicator--931a80f4-72df-42ec-851f-29f92ebcc321", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09cdac1-186f-4674-96ba-112933b41acf", "sighting_of_ref": "indicator--caf14c6e-af32-4336-aeb0-df15a67f2883", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e00e99-642d-4605-a78e-c780dba5bcca", "sighting_of_ref": "indicator--96da0020-0f6e-4b6f-8f0b-9cddb9ec4261", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eed88d6-0a0a-473e-a7d2-3a067737bf47", "sighting_of_ref": "indicator--e5acf9de-9661-4e23-ae63-2d214d48f3d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c36ff7-9752-4418-a39a-5a8969b2df7d", "sighting_of_ref": "indicator--daed50b8-c3bc-4dc8-ad63-3f7d6eee0699", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f986a2b-4c61-4f44-8f78-ef0aca874f14", "sighting_of_ref": "indicator--400ae7b3-c934-4f67-8486-39a006088583", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8e07ca-0c0f-4f1b-aa62-13ffc03732da", "sighting_of_ref": "indicator--bacfb1a4-8123-43db-9fb7-120ffe931c1c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da27efb2-f16a-4f4f-a5d5-0b5a0d9dd621", "sighting_of_ref": "indicator--fbbdb140-de62-4207-a996-b1c037eda937", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d205f383-ab86-4071-add7-5829f6586893", "sighting_of_ref": "indicator--8b0b3714-0b48-4256-9f81-d9b79aa99446", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979310a8-6d37-484b-8470-1bf42eb22383", "sighting_of_ref": "indicator--a2906f8f-bda6-4dba-8c54-72ef7746479b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e29e12-5974-4add-87fa-0913976f6305", "sighting_of_ref": "indicator--cfacb99f-69d1-41f6-8525-73da9a764652", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6673180-7db1-46f1-b587-fa5f03761ede", "sighting_of_ref": "indicator--159e9177-8eca-4ead-aa30-cec7476d7a51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0177d209-3623-4a5a-8d1b-1498901620f7", "sighting_of_ref": "indicator--0cfdea15-b9b4-4a94-885d-2fdc58e61f5e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a572a0ca-c42b-44c6-8f25-156fa24a0d39", "sighting_of_ref": "indicator--3cb77f79-838a-4855-adcb-60c6e010a450", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060761ad-867d-4d2e-a3ed-2e85065a6e04", "sighting_of_ref": "indicator--1477d3b7-b22a-4cee-ad4c-bd6d1be029aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78df76d-68c3-481c-a58a-472cdf7176f1", "sighting_of_ref": "indicator--9a394948-e40d-43e4-8995-e1e4c930a9dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ec995d-e44b-4a45-a72e-d681f4cd1324", "sighting_of_ref": "indicator--e502ff00-d4ed-48f2-9206-93a4bc87f9d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def34cc9-87cc-4391-9300-45e69c308864", "sighting_of_ref": "indicator--9e58343e-5df3-46bc-b3cd-a94c422a37c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558cd754-db39-46a9-8d25-731235ae2902", "sighting_of_ref": "indicator--98e764e4-f799-44dd-9d07-a7f395ea2400", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e321701c-8b4b-44c2-9c0e-042db2bba640", "sighting_of_ref": "indicator--323361fd-7d3f-4749-96f8-dc1295357769", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9c66f5-563b-44ba-a332-7ef7ef773d1e", "sighting_of_ref": "indicator--30f2b544-c86b-48ae-93b1-b1778265677a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63f5765-f5f3-412f-9ae8-9c747a03124a", "sighting_of_ref": "indicator--5836d483-c35e-4fe0-8f2d-39c9b5761176", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613c2067-9be5-481a-b460-7385b6df6c37", "sighting_of_ref": "indicator--481437bc-811e-4568-81b8-b280324f80fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7ab1fd-5f1d-4a9e-b681-2e3ce915726d", "sighting_of_ref": "indicator--481437bc-811e-4568-81b8-b280324f80fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e43cabc-ceed-4d79-94a8-6e25afdff604", "sighting_of_ref": "indicator--ce41360f-2fe5-476d-8d45-5f6e51566913", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b05f548-b370-4e46-913f-f5cbc99fae02", "sighting_of_ref": "indicator--9bace57e-54f4-4cae-8624-e0b2605f707e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d677e3-6fbd-4a58-8be3-54cc7ab88470", "sighting_of_ref": "indicator--9d094bfc-08fc-4ca5-a070-3a81a9499b82", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aeecfc9-3ff7-45be-a423-6a466f50c6ed", "sighting_of_ref": "indicator--b2d47a33-bead-4391-9923-29c579459e95", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922edb43-fde2-4b73-bf38-8472ed21ce51", "sighting_of_ref": "indicator--5a0da23d-8ae0-497a-b3a2-2792c633b34c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fdcfe3b-54d5-4297-adea-a20abae47989", "sighting_of_ref": "indicator--df031399-e7b1-4fc2-8d86-2a9035fa54c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795ab436-f29c-493a-8cf0-d4da590b1dae", "sighting_of_ref": "indicator--841e3839-5a66-4bbf-8f28-ebaf33eb2cb1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ded8d67-b3b9-4409-b96f-619b58929f84", "sighting_of_ref": "indicator--a2ab8b49-1dad-4dd2-affb-661029519133", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8931839-edc5-4049-a71e-1841e886eff9", "sighting_of_ref": "indicator--be74d2f8-9fbc-4955-bde0-57d43cdfc340", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3581309-8398-4cf3-8db5-569cb8e8f7b7", "sighting_of_ref": "indicator--66b69d29-edee-41ec-9523-4edeaa9ed021", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785f5546-9509-4788-87b9-59e378d6a55d", "sighting_of_ref": "indicator--2d4c350b-2cd4-43b0-bd3c-107b06b3cb1f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e868cec4-7d94-4ea3-850e-4f50216187dc", "sighting_of_ref": "indicator--712e5bde-83d3-45b9-9e9b-b365d0d9e2e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8811f41-83ea-45c7-84fa-dd8555faf263", "sighting_of_ref": "indicator--40433625-8c88-45b7-a00e-74f68b884f12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff33899-7dea-44d5-889a-ea8f10444f9c", "sighting_of_ref": "indicator--829462c0-0056-4c08-9216-cb0ad1620a66", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a6ea14-7e6e-4e4d-9653-ebed8f7d7560", "sighting_of_ref": "indicator--c632f701-8278-4c5b-91b5-66eb09fbeadb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03ea5ea-4b11-40d1-90bb-013f0ddfb8c9", "sighting_of_ref": "indicator--5a9c6130-799a-4202-89b4-b6dc61025cb6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2b94bc-eea0-4807-b85f-4902e6a865dc", "sighting_of_ref": "indicator--9c84cddb-464f-4467-bf71-31278dd6de24", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a58c94b-2765-491e-a239-44e3f3c65229", "sighting_of_ref": "indicator--41efbf4c-6921-40cc-aea4-9c71171623d5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad7c661-bedc-45b3-b2c6-81355bc5be02", "sighting_of_ref": "indicator--4829593a-993a-4d0b-a474-db913f69458e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80e80ce2-603d-4a59-b97f-b963f1295fa1", "sighting_of_ref": "indicator--0f4e0424-1941-44f0-b4f2-d58af901908c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb97fd9-6432-4687-bca9-67e287799f8e", "sighting_of_ref": "indicator--66da9871-58b8-40df-83df-ae5ea08f364e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f712f2b6-f920-4def-9264-1710aecc8e02", "sighting_of_ref": "indicator--fccdb43a-0625-438f-9649-1dc471124a48", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f8a6cd-0113-45e5-9d72-f1b89e460c8b", "sighting_of_ref": "indicator--c6d56699-556b-4fc1-a21a-411d204e23d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac9db71-e048-423c-a28e-a939575b15d0", "sighting_of_ref": "indicator--1aa5a5f9-2926-46f3-beaf-0a55cdaa4f97", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a126fa-6ab6-4160-990c-349938dd69ce", "sighting_of_ref": "indicator--a7b9689d-dbea-48a0-8186-b975b3944306", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02813f05-a32e-46d0-991d-5087770b9400", "sighting_of_ref": "indicator--84b5053c-0ff6-4fb3-a2fa-8b35009c9812", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba5a15e-f53f-4644-964d-f458118c82de", "sighting_of_ref": "indicator--231e4ba2-8710-4d0a-a3e5-8c5dba23edcd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b754c7a-8033-4163-8ec2-2e8f2c95bb5b", "sighting_of_ref": "indicator--8461d284-2f1e-406e-b249-2d34446c7c3d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e0c0c4-7652-460e-b8e3-f9fc1ca829e3", "sighting_of_ref": "indicator--80014c44-390a-4337-bf18-dd74a8797170", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044b77d2-fccf-475b-86d8-fa4b478ee30b", "sighting_of_ref": "indicator--72e7abc4-2bac-4503-bdc2-438bb54ffc7c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1cd2e8f-2c40-4e8c-9e35-4783ce5986e9", "sighting_of_ref": "indicator--f856987f-8a29-49ec-bc7a-6d9975c653b1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb09815b-aca4-48e9-b2c4-f8122c5e8760", "sighting_of_ref": "indicator--8cdd4f6d-f999-4aef-8098-bcbf724a47a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6732b9d-8262-4e4d-82e3-9f60a59190a0", "sighting_of_ref": "indicator--5f32571b-47b4-4dc8-ae25-448ec7160e5c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a70ffd-183b-466f-b06f-58ccffaef2b4", "sighting_of_ref": "indicator--ba9fe8b6-090c-4542-a2da-5fb9196206b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c990e5e6-376a-45f4-aaff-1ff3f389cb17", "sighting_of_ref": "indicator--35edeebb-9095-4998-9725-3bf1432b865d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba1f34c-1073-4669-b0b3-41b8f8cc2769", "sighting_of_ref": "indicator--c054fb8e-bc47-44de-843a-9e6fbb51262b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdbffd7-e0cc-4f47-a21c-3241e60a6585", "sighting_of_ref": "indicator--2550c29f-a357-47e2-997d-9092ca35263b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6535d2-cab1-4c6e-9846-15f70876dd22", "sighting_of_ref": "indicator--d2f44f24-d610-44ea-81cc-dc7bda296b5e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c1176b-4b7b-4d20-8559-4455c56ca91a", "sighting_of_ref": "indicator--007ac3c4-b7a7-4746-9681-e3a4d67252e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250cc285-6b03-49fa-8506-1afbee0ced23", "sighting_of_ref": "indicator--b26ce83d-1e34-427d-93a7-bc9a6b12466c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b4774d-19e3-468d-a790-5b8d67c98cc1", "sighting_of_ref": "indicator--ff8a53fe-61a4-49a6-be61-1749df548f59", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8787832d-6a54-445f-bbbd-930e9dc51be9", "sighting_of_ref": "indicator--78e885e9-0c15-41b5-ac54-626ede9fbe75", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dc87dd-df96-487c-89a0-8fd7a5d83694", "sighting_of_ref": "indicator--5ebf16a2-5f61-45e1-aa3c-9814cc8d8d64", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cef5502-6ac7-42c2-bf2c-9719c8a1e355", "sighting_of_ref": "indicator--e477679d-8c78-4189-a8cb-8524c6df4f4f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63eeac41-a16c-4f3b-81e1-439a1f67c385", "sighting_of_ref": "indicator--b4fb80f6-2306-4393-a930-fcaeeed1be17", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb11166c-f231-4456-9d01-a41056c58944", "sighting_of_ref": "indicator--7e56e45b-b14a-4e1a-9156-b202fb56c355", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07c99bc-0784-425b-8f37-1e2731838f17", "sighting_of_ref": "indicator--eaa109d9-653a-4f7f-baff-d5c5030cfb0f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d8919c-f875-4f60-ae8a-4fe7fbd9213e", "sighting_of_ref": "indicator--a710031b-0358-484a-82b0-602fd584eb88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7168d2-8730-41f9-905b-24bd8ddcc998", "sighting_of_ref": "indicator--d8ced8a1-9aa1-454d-8322-5eda27405aed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66e5388-6cb9-469a-a4ea-168a1c21907e", "sighting_of_ref": "indicator--9aa829cf-b35a-4309-b732-76e1fac0cc9f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67eab644-07d6-449a-a7b8-1b1762d0dbbc", "sighting_of_ref": "indicator--541da5d3-56fd-41fb-8528-7cf8b8325d21", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8de151c-7ab9-4d3f-b1b2-44d01e86b47b", "sighting_of_ref": "indicator--cb3aa506-1577-4914-b395-84c8b0c6be69", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70209f3-cceb-4542-8d11-7ca3dfa5e806", "sighting_of_ref": "indicator--938ed493-30fc-4009-8a90-0faae708f79d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d42504f-0498-4724-b828-10aa22e9222a", "sighting_of_ref": "indicator--41452292-a698-49b3-a743-edbdf0bb12e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5973b918-fc56-465f-b69b-a3d75a9481ab", "sighting_of_ref": "indicator--8a3b0210-91c6-42bd-adb2-3cdfb7eecb1b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d04c282-3efa-4a96-9f15-d959ba318007", "sighting_of_ref": "indicator--30a93bcc-c69e-4832-8c3b-640b0c195873", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51343835-b005-4c66-96dc-9b8ce31436f1", "sighting_of_ref": "indicator--f473cab4-37cb-4a92-9d79-ab4c58db91be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98978c0-550c-4757-9d92-80b3ecdded6d", "sighting_of_ref": "indicator--72359956-ea10-42e1-8e39-ae9ce3322683", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b090129-cc23-4379-b019-8c94c109d094", "sighting_of_ref": "indicator--17c90941-9c9d-4e17-9881-c91776adf38d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d58498f-ae3f-4807-a259-54f7f80fed86", "sighting_of_ref": "indicator--13ea85f9-6f4d-415a-9483-a58394fb0a47", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d4b12f-1821-4b06-b385-615bfbb3ef2d", "sighting_of_ref": "indicator--a92e5632-8de8-4fd1-bc40-7a719a73d14d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f695e0b-c039-4ac8-b2ce-c7a4b06bfad6", "sighting_of_ref": "indicator--10cbe72c-816e-417a-8b9f-9ee6a42526b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e12d46-452b-4f6d-9812-4952a06f7765", "sighting_of_ref": "indicator--8b18a5e0-a114-4df9-ad01-7a20eb85b183", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259fd66c-507e-44d2-af4f-e318db3e77bc", "sighting_of_ref": "indicator--50adab37-d76c-4a0f-b6a1-3bff7150c2c9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993ff6d7-00c1-46e5-a17c-dd06ccf01185", "sighting_of_ref": "indicator--0ed69cf1-d297-4dfe-9d13-7ff319c28675", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1386f80-ccb4-46ba-8605-3e850cf6fbd1", "sighting_of_ref": "indicator--a980551c-5be7-4afe-b5d7-58bb44237593", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78351ecd-0273-4f21-ab58-de738057a8e6", "sighting_of_ref": "indicator--8909a124-7a70-45e8-b50e-45c595dc32b4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5cc931-7e29-4c40-b3ef-a85c95a75ab6", "sighting_of_ref": "indicator--380a0962-7fa6-4e74-8aaa-fd55b00a6866", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd614416-a833-4e57-8b00-bd78b7fd9e7e", "sighting_of_ref": "indicator--32ba2c4d-5a80-42bf-b305-a7f087340b12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf43329f-49a7-4279-bbee-f2fee8c25fa6", "sighting_of_ref": "indicator--5f7649d3-58bb-4ce3-8abd-de90b8baa662", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603fde23-540f-4d15-9e40-e31eb49f71a7", "sighting_of_ref": "indicator--b38cd065-973a-4fcb-9ef7-b8da94910153", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8d9bde-d0a2-4fdc-afab-9e4b09d33d10", "sighting_of_ref": "indicator--10428e2a-b70a-49ac-a996-079c630bb6e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec06216-2de5-44b2-bfdd-dae7ca0a64fd", "sighting_of_ref": "indicator--69bd2276-5912-4823-b10f-28abc92884eb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7d24662-e7ab-4242-a70f-79419c3dd0ba", "sighting_of_ref": "indicator--d59b5373-bc2e-484f-89a8-05d421f2f705", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e823b8a-3f66-4f34-baff-aeb4e4435e78", "sighting_of_ref": "indicator--d90be078-75bc-4d3b-89a2-1628bf4e475f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94ab088-b393-445a-9fab-bde1b8969a82", "sighting_of_ref": "indicator--6b30424a-7ba1-4a3c-adbd-972efaf9013c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6467d7d2-53ba-436c-a222-b35a15a971ef", "sighting_of_ref": "indicator--973630a9-31bc-4dac-b6c5-3bf7ae361975", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7610de3b-bd2d-4777-bcd9-a3cae78d68f5", "sighting_of_ref": "indicator--68b4bf0f-0d0b-4626-8a97-3e1d3acb6d20", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5593d59-43e5-4d6f-86b5-20e8b087ce80", "sighting_of_ref": "indicator--40280337-b400-473d-b586-5defc5b4719a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb043b53-b797-4b2c-b828-799bf546a882", "sighting_of_ref": "indicator--ddfc63b0-0664-413b-94fd-021cae28221c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d28d4ee-85c3-411c-989d-29c195d53f7b", "sighting_of_ref": "indicator--da1e75a7-38a9-4220-8d2f-1b5a8a86122a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7fe97b9-0921-4fb8-af3e-7e9ed960168c", "sighting_of_ref": "indicator--07b7d214-4d90-46fb-a4e9-38d4c241f7c1", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f682de-da04-4b0a-823d-f0d2dd634f47", "sighting_of_ref": "indicator--58717004-9c6b-4059-8998-ae4cd85dbb2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b061bc-24c2-4715-af7a-d036084ddac3", "sighting_of_ref": "indicator--3a41a5b9-0fda-4ff8-91bb-c3451eaf21a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7a17fd-f773-4b59-81f0-aee030a29bca", "sighting_of_ref": "indicator--d5f6fbef-3498-432d-b00d-238b0c1d4252", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69ff6ef0-f9b6-4840-b051-039d733ac1c6", "sighting_of_ref": "indicator--b5589c70-2c7b-47ad-9f09-da626f2bc5c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ecd953-c449-4457-a4ff-b73c174d5efb", "sighting_of_ref": "indicator--52d1829e-7ca7-4a73-a648-f2babe387a0e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713c9db8-77a5-4b56-aff4-3063be4f3ac1", "sighting_of_ref": "indicator--c661d155-601e-4010-b1b1-df3550d2ec89", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62001df-a9a6-4297-9e9a-df4b42cecd00", "sighting_of_ref": "indicator--390aa3a9-18e5-4930-8c93-e2a9a6019f6e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb49edf-05b9-4056-8049-f857fa560de4", "sighting_of_ref": "indicator--86946e11-3fe8-4874-bf2c-5dd6850cc02f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22b91dd-fa6a-4b3c-8206-388285842f43", "sighting_of_ref": "indicator--95c6d9b1-f88e-468e-9756-383f3f716fe2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1bfc76-e968-4612-8cb0-9ea43bc95ca2", "sighting_of_ref": "indicator--7e38e1e1-8487-4f8f-b45b-fc7cefe0b2aa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2009e4-d1e7-4e28-aa69-5da43ce22fe7", "sighting_of_ref": "indicator--772e4748-b6a5-489f-9145-0850f1bf2eed", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932c7d51-9365-4092-b12a-9b2084f5bbf0", "sighting_of_ref": "indicator--df4c42a9-9db9-4338-aa51-70ca3f17e3b5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189e8f7b-cd39-4f79-a8e1-7d2979202070", "sighting_of_ref": "indicator--b3b3c3a3-363b-4ef3-83af-f3bfa6348ee6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3e6440-a457-4e70-8e72-88f1a2234a2a", "sighting_of_ref": "indicator--bbf24def-55d9-4fd9-b18c-9083d116640b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0332b35a-69ba-4f43-ac63-69e946574b1e", "sighting_of_ref": "indicator--8ade2284-45bf-4af0-8b44-f87ca7b442ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e89a8b-cbd6-4efa-9797-2572abdc8432", "sighting_of_ref": "indicator--f6485d19-205d-4fcc-80e4-165e7ecd6dc3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595a64d3-0c7c-44d0-9569-b668eb218ce7", "sighting_of_ref": "indicator--a8902ec8-4995-43b0-8661-bc256f454779", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6bab343-31e8-4fae-af8a-778460f109a0", "sighting_of_ref": "indicator--8d80e29f-a1a6-49a3-8d65-910c711917cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da20e8d-29f2-46f9-86a9-c996b50e5eb0", "sighting_of_ref": "indicator--26f3e42c-a1bd-45be-9634-9fd5bec2b462", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fa6c5f-42a7-40a1-acd7-b0b31d0b60f8", "sighting_of_ref": "indicator--37c2d687-cc93-460f-870b-94beccfdd35c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2abc2d1-2245-4971-a948-70d43506a73d", "sighting_of_ref": "indicator--bef6209b-26b0-4318-9b2e-cb5b2f606298", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2906e898-048b-428f-a62f-f77f0a6e622b", "sighting_of_ref": "indicator--1f35755e-12aa-435c-ac92-296a2238a9c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2defaab-0498-4d80-ad63-9e18501ecbd8", "sighting_of_ref": "indicator--5290ce5c-7ff7-400a-b14c-72851ff3a635", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15211793-44df-43bb-9449-7170758cb489", "sighting_of_ref": "indicator--246ade18-0675-4fc8-b84f-92bc69fa2614", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9184d3-49fc-4634-8e06-d5e0d60bdd5b", "sighting_of_ref": "indicator--507e329a-9c5d-400a-8380-bbd364e48f1d", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f4d453-8328-4add-9877-67c3783d4e8a", "sighting_of_ref": "indicator--5c2dcd18-d82b-4d00-a98a-9da71d0d31bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736f3b6c-074e-4556-9d33-58e69e15a33e", "sighting_of_ref": "indicator--6a4c6678-9186-40bc-b34a-c3d8fb692aae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82799ac2-0676-4a01-a975-65e63d129898", "sighting_of_ref": "indicator--6c6c8087-54c0-4930-accd-66a5c3de5f78", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a116df-dd89-499e-8967-45f95a39edcf", "sighting_of_ref": "indicator--fdce1eaa-623c-4607-b09e-a90807d8201f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a470b9-2d41-4772-b4e6-6f9d0d364d94", "sighting_of_ref": "indicator--a86f574a-7e08-4e2d-96e9-7b46c9020321", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3d06e4-b62f-41ff-a2a3-048bf76b2eb3", "sighting_of_ref": "indicator--5bd02e9f-35e0-4837-9489-7025fd629125", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c986c74-9abc-413c-81b8-8512430904a7", "sighting_of_ref": "indicator--569f9cff-bc4b-4d5f-9610-c0b398594de0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b90e13-b801-4be1-884e-78b296b786b4", "sighting_of_ref": "indicator--0a548dec-1931-4116-a6d0-f5d06f17b641", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c36202-3f21-4c0d-b6d3-0216ddec7da3", "sighting_of_ref": "indicator--13873064-fb50-447d-a34a-abee7b2f6a5f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdd15cc-e60c-41b7-b9e3-bab0d292be55", "sighting_of_ref": "indicator--16ce1846-b174-4c00-82b6-b772b72b69e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbc1f13-f02b-4d6c-b13a-99673338ffc5", "sighting_of_ref": "indicator--856fd317-8c7e-44d4-aed8-3d61455e7217", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2a57db8-3204-4fb0-818a-a833767f4018", "sighting_of_ref": "indicator--7aa81450-19c9-4f19-ae28-352228288bc3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3354b77c-458d-4adf-a8e4-b8225991e9c6", "sighting_of_ref": "indicator--913ffeaa-8f29-4121-8755-ae74bfc6f6ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941170a4-7a5c-4e74-9f83-a7502c9305c9", "sighting_of_ref": "indicator--14863c49-c255-48c7-a9bb-03cf67639e3c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018392cc-63c1-4e7e-b6fc-156fe0d63060", "sighting_of_ref": "indicator--898c2a9b-d8be-4a3f-bd2b-4d662223db85", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f44c695-7a06-42bf-b3fb-d794c8477c9b", "sighting_of_ref": "indicator--64c1e1ce-8d29-4a33-870f-cd571a1080c4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3677aba1-09c9-4a21-89c9-8b22d3b61a7a", "sighting_of_ref": "indicator--2cd48cbf-8ed7-419c-b6e3-d7865829d640", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6242e6-65b3-4bbc-b32a-29a86e7e445e", "sighting_of_ref": "indicator--57888814-9335-46b4-a9ad-bbe8654fa582", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffd6765-b4c6-41f3-a85b-900d358dcc9c", "sighting_of_ref": "indicator--54821d15-dfb2-4067-a8c1-4aaf5dc20bcf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3cb12e-2772-4e09-b795-799c380a287f", "sighting_of_ref": "indicator--6e742d33-30f1-4f78-993d-ff188ea804a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e50d17-1938-4609-8e31-50a1e9435936", "sighting_of_ref": "indicator--31cfdbab-555b-4fe1-aeb7-df621eb91f01", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c042b62-a1b0-4caf-ac0b-8c126616ffaa", "sighting_of_ref": "indicator--d35e5aef-9526-45bc-b66e-053bfa59e662", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd998dc-663c-44fa-9e4c-23f511a1713a", "sighting_of_ref": "indicator--906fc00b-e003-4096-8e25-77da38e5e39b", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fcc26c2-cf8c-46a0-8398-7ff2f5d7cc37", "sighting_of_ref": "indicator--b68705f9-3ae7-4aac-b4b9-006ecf615925", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1072b9-34c0-4d77-a073-617be1f0ade5", "sighting_of_ref": "indicator--eeb11bcd-d9f2-4a5c-8821-99ada043f7a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed24d31-7ea7-493f-a06b-43a5766b95ab", "sighting_of_ref": "indicator--f6b36184-2832-4c30-895d-f257a7621838", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9773d9b1-128c-4214-ae80-d2cf9290ac94", "sighting_of_ref": "indicator--7557c3d3-76b9-4a7d-b6ad-2b5c65a347e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3537341-0808-4b6c-aa3b-d70875eadea0", "sighting_of_ref": "indicator--4565331e-f94d-4f67-a43e-7d320cde1e2c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85deefa-ff48-46e7-8788-05c84f2ce330", "sighting_of_ref": "indicator--4565331e-f94d-4f67-a43e-7d320cde1e2c", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59640084-c8c0-4ca4-94f8-1f06b477f9d4", "sighting_of_ref": "indicator--1b152455-849b-445d-9be0-e189943bee5b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd920f2-3ccf-46bd-8b14-d61daf010cd0", "sighting_of_ref": "indicator--1d31be88-dca4-4a81-a4b7-76fba637ba67", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed08b75-c89b-4cfd-a7f2-8e61681535a0", "sighting_of_ref": "indicator--42ea8c6d-f962-4ea5-823f-93fa26d9126f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1946fc9-69e1-4478-b6e3-14d09fae5a9b", "sighting_of_ref": "indicator--bee3d74e-e143-4653-9aa7-a27d9f8ab8b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc55ed95-fdd1-4f46-a5c3-8efbd143bf38", "sighting_of_ref": "indicator--e7baf730-ccaa-4374-be5b-172c72dc082b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be98332-d199-4b14-b00b-d9d14dcf6829", "sighting_of_ref": "indicator--04aba42b-a0f6-4058-a893-64d3d34150f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5ef34c-5cb5-4eab-9baf-8835170adf9a", "sighting_of_ref": "indicator--b7328dcf-a704-447c-b108-f762968d855f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce6e836-dad3-48dc-b7b3-f1c62ebadb24", "sighting_of_ref": "indicator--aa9af5e4-e94b-4118-a02f-67d9dca72c92", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3911494e-5805-4c8d-b3ab-77edc8352d96", "sighting_of_ref": "indicator--137af03e-9e9b-41ec-9384-c552e63f5876", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21c1103-ab12-4efb-bebb-ac547d7ec77b", "sighting_of_ref": "indicator--0918fd02-e1e9-461d-8498-eaf0b01e57ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6c0de7-dc92-4b2a-ab8f-b7ce6f4a525b", "sighting_of_ref": "indicator--52dbcea0-8e1e-4367-815f-2418faa85e23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde0d4b8-ddc4-42bb-a1fe-fa74f255dd7c", "sighting_of_ref": "indicator--968356f9-7a8e-40a8-9b20-210a9747525c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160c592c-c407-48b7-9a58-fa07281eb5e4", "sighting_of_ref": "indicator--98146ea9-fac2-467c-b87a-3bdbb499d284", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411aa9b4-ffad-49e4-a24d-1909e9939fbf", "sighting_of_ref": "indicator--ced96528-0398-4a1b-b952-a5bd7bff3923", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca924a7-2b9e-49c9-8862-362b0f791454", "sighting_of_ref": "indicator--daa4f22e-7891-448d-8629-c42c28a04457", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528be83d-1a6f-413e-b1b5-1243b9783228", "sighting_of_ref": "indicator--fd51187e-9711-4df1-aa8f-fa80295ad384", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8367158d-a68b-4a93-8939-ebcb2c99fc76", "sighting_of_ref": "indicator--52c2c33d-d03b-4ab5-91ed-185fcb07b5a5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4912dfd3-d3dd-4522-a1d2-9db59f7b9f14", "sighting_of_ref": "indicator--3d35ff46-dfc0-4e2a-9f72-d564744a5da7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8792fe4f-9c57-4683-8bfe-482d58e8826b", "sighting_of_ref": "indicator--02c90842-f377-46cf-9740-33d8a384632d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15697f33-7b4f-4034-b653-3236162ef6f4", "sighting_of_ref": "indicator--216028f5-86ef-4636-8449-086645cfba1c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb6429e-8802-4a3a-bcde-ae2ee5952bac", "sighting_of_ref": "indicator--f229e8fb-46d8-4bf1-a9cc-e64695a0fa29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44c041f-66db-4ec9-8f1e-b588e243aea4", "sighting_of_ref": "indicator--d06cb74d-a732-424f-9cbb-e72bf0dcc2c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41300c7c-8d19-4c27-bc75-3f3e331a0861", "sighting_of_ref": "indicator--ac4f0da3-41eb-4709-9e82-26271cbd8cd1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639164fc-6678-476c-813c-b475bef35f69", "sighting_of_ref": "indicator--11ffbea3-e743-46c3-8671-9fa6221971ec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59017ef-d329-4d0b-b738-e83a7cbd0c93", "sighting_of_ref": "indicator--991c8104-6beb-407b-ac77-e5dcee95608f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5da9f16b-bf40-490b-9c5c-23121b557c36", "sighting_of_ref": "indicator--49b606f8-1194-4851-a396-2d79435a9e20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6753ce6-918f-474d-b599-ef158081e1a0", "sighting_of_ref": "indicator--7eb16019-3b97-48f1-92dc-788d94ab634f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b15e024-41d7-491f-8593-33035479185a", "sighting_of_ref": "indicator--84b6e544-5dfd-45c3-90a1-966fd6f6bd05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edba521c-faf8-44ff-a922-b8627925d49e", "sighting_of_ref": "indicator--036efc87-5a6f-4887-9be5-f5a05fcdb6e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9611e13e-b4d9-412c-a608-d3943f723f26", "sighting_of_ref": "indicator--b4b6f47c-dffb-46b7-a2da-e11033749214", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a393e3c0-9931-4ed7-9e08-2a56888b7f39", "sighting_of_ref": "indicator--8462980b-738a-4a8c-bd0b-0181f7f8e569", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b41a70b-b52d-42a6-bc68-3051997493da", "sighting_of_ref": "indicator--d468baf7-199d-48e7-98b2-dd60ccd72a38", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddec5695-9a6c-4cc3-b2e5-893a577af4aa", "sighting_of_ref": "indicator--d479d233-51a5-4f16-aeab-791c65c9a799", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8ad05d-9e1a-47eb-8821-d010ce51a089", "sighting_of_ref": "indicator--4d6dc90d-516a-4555-ba28-47cd031fd9de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d7f523-6509-4b6e-ab52-0578f0c72f94", "sighting_of_ref": "indicator--7dcbd718-7c59-4a76-b363-498eba1d23d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f3cfa6-52a8-4d10-9418-d03e8cd53437", "sighting_of_ref": "indicator--f3d7e12d-5c0e-4964-b03b-0181ff16ed22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f69c06-5af0-42c7-8d5d-3135355f700b", "sighting_of_ref": "indicator--57ad493f-0dfb-4f43-9bc8-1545030b447f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c07759-7e61-41cc-af44-2e741fd03860", "sighting_of_ref": "indicator--f8aa5db6-ef0a-448e-85a4-e7db7c93e50f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24b3164-2c9d-41d0-bc18-cf8b8326ad95", "sighting_of_ref": "indicator--5fc44ce4-5c13-4f0f-8eca-b94fffa3bc11", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23037236-54a2-48a2-af32-0e3a1af8a1b9", "sighting_of_ref": "indicator--a4c03022-f0b8-4f95-86e5-e303a5ca78dd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193bbcab-00a9-4f56-906d-7a421818bd86", "sighting_of_ref": "indicator--1472b4f9-d6e0-4e83-997b-3b8b5a89e08a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcd8284-a874-407e-a0b1-4c92085ba174", "sighting_of_ref": "indicator--ef60eeeb-bb77-4fc0-b490-e5c676af13ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f735ef-2073-4e07-aaf9-ff6cd1fece64", "sighting_of_ref": "indicator--49b7243d-7ac2-472a-9e9f-58889d26c82f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3026f2e9-9f45-4417-8369-9ec08afb1e0a", "sighting_of_ref": "indicator--92d9c683-5097-413f-9534-3e2f5442f613", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2515049-7048-48ad-a184-d1ff8fd321ab", "sighting_of_ref": "indicator--d6e8783e-0545-4033-8101-0c1779ba232c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445db592-ecef-4935-9d33-63fba05a9631", "sighting_of_ref": "indicator--a2d1a8f7-ccdc-41e3-aa37-2c486e0a7680", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df036806-c2d8-4a36-a415-b8e660f10ef1", "sighting_of_ref": "indicator--db8358f9-3cb1-4659-90ed-b2f562945bf1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9671ce1-71cf-437c-bc63-df31f0e2aba4", "sighting_of_ref": "indicator--9554ca36-cef5-435a-80d4-a830d0206832", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91d6c14-5798-4426-ba60-5b64b02f9707", "sighting_of_ref": "indicator--d7adb865-664a-4589-a380-55dc239e9491", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6a9312-ec9c-49f7-b5d4-53949bcf88e8", "sighting_of_ref": "indicator--73efa91d-b914-44a9-bc93-b4e5e3d062f2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fadadf9-5610-4e26-aa7a-9c6f28eea930", "sighting_of_ref": "indicator--510926e0-110f-402b-bb53-eaaab6a7fc3e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24022bc-22a8-49a2-ab36-92637ad8fff1", "sighting_of_ref": "indicator--a31a2705-170e-4f85-b582-d7fe378196bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201c750d-fe63-47f2-ae26-98685a43cafb", "sighting_of_ref": "indicator--41a30c1d-556a-47d0-9c27-0c38ce6475ba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f630b03-3c18-433d-8039-e4e3038c11cd", "sighting_of_ref": "indicator--fa794e94-82e7-43df-afe0-2b688c7e4157", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab2cddae-f7c0-4f7a-acc1-12ace24ef42d", "sighting_of_ref": "indicator--26e70da3-8353-4279-a50a-954c9651930d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b276f3d-b92f-45fc-b7d4-55f040e3e1d5", "sighting_of_ref": "indicator--12de5b56-46c0-4e2a-be51-14b5f48d30c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175cff78-ba89-42d2-9d81-9dd3e0854247", "sighting_of_ref": "indicator--e9485c01-dd94-455e-9544-cd5f1ce4a045", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa49853-e5af-453c-ab8b-e634f7d2afee", "sighting_of_ref": "indicator--498a19ce-9d05-4501-adb5-daa7826d06a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38dad66a-70b8-4d0d-b404-9889dd2b59a3", "sighting_of_ref": "indicator--efefa5e0-f126-4a60-9221-26ff76046b28", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1b2a784-2fc8-4310-81e6-e8a4d9076ff1", "sighting_of_ref": "indicator--df1e4716-b487-4687-8d36-b6d22b2fe1b7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6982d0c6-3033-4f22-9977-3cf61e0aa3cc", "sighting_of_ref": "indicator--072c5be5-a2dd-4561-a6df-3f1a9e2b703b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7178eca-77c5-4e51-a1c2-82497f0bea32", "sighting_of_ref": "indicator--5b81e86d-5554-4477-bbba-821ad55a990b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2de8e5d-9eba-44e3-8463-1b0f473a6466", "sighting_of_ref": "indicator--2e75200c-20b6-4f0c-8130-5e63ed9b5708", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf42896-df95-419f-88f5-5c4a20974d7d", "sighting_of_ref": "indicator--5aa8d02b-1770-4786-9eaa-201a64bcefa9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc001962-8654-4e15-8d2c-329bb8b5f782", "sighting_of_ref": "indicator--63d4cca9-9494-4c74-9bcd-bb2ec2d872cf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c87900-3d97-40dd-85da-471e9fcdf37a", "sighting_of_ref": "indicator--c611a23f-0f37-4d92-9bd7-3e23bf31b57d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0643e25c-a631-4c24-b6fc-eec8610c5401", "sighting_of_ref": "indicator--8ba2c3ea-5721-4615-a5a8-fbf1c07c3ea7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da1722f-6293-4aaa-9f76-670de009cbe0", "sighting_of_ref": "indicator--e9379428-5328-4cc5-8a0c-b21a1cd395a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c1b0d7-6fa2-4b81-819f-0062f4c0b880", "sighting_of_ref": "indicator--3e51d65c-09da-407f-915e-5531c0adb7c1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57b3278-4369-429d-b8c0-50a0aa54381a", "sighting_of_ref": "indicator--527953bd-301d-409d-9021-0bf1b88ab42f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c972f66-57d4-47e1-831d-86c1a06fc02d", "sighting_of_ref": "indicator--4cc9ffe7-51c1-4682-bf98-e42d39b241be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8981e9e9-678a-40b6-aca9-d9602690346d", "sighting_of_ref": "indicator--e4015a9e-ad47-4184-9a88-549c5d77b1c6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dce39b2-c8af-4c3b-938e-ae78ac8293eb", "sighting_of_ref": "indicator--39be5322-8a69-48d5-ae45-caf2b5deda0f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68df9a93-97f3-4e26-99a0-c666ad5cf1e0", "sighting_of_ref": "indicator--ded8f80e-1c25-49c6-b8a9-db472bbd7082", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0083d139-5dc6-4251-94d4-f4e0dee50c12", "sighting_of_ref": "indicator--95ec761d-31cd-4fd9-9cdb-3181077980e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22941b36-c520-4b15-ba35-89969f31ef2a", "sighting_of_ref": "indicator--913f2d90-7be6-4def-8645-3cc1e7fc909f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aaff4f7-50e1-4685-b8b6-c6fd3db69447", "sighting_of_ref": "indicator--c6d575ad-16df-4602-b696-f0426973e09b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c5897b-4b0f-4647-ae13-b670ec6cd138", "sighting_of_ref": "indicator--12590732-c15c-4371-a856-6398f4560c48", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c325bb59-4801-4739-a20b-2aab3c19d856", "sighting_of_ref": "indicator--e442cad7-8e31-4390-892b-36a550178946", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa6d94b1-52f8-4514-90af-0e876e01d2e6", "sighting_of_ref": "indicator--2ac0d084-9dac-4b3d-8d60-72aeb9b90207", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afa236e-2f43-4dec-bfcf-c616735e7e31", "sighting_of_ref": "indicator--da24dc3e-ed11-4985-9e3f-5ba71a8944fc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec045ab1-544e-428b-b53d-0b45de5e5160", "sighting_of_ref": "indicator--904a2f37-31c9-4da4-ad97-88a59e05d039", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b39a668-207d-4f25-85ff-36321452b1a7", "sighting_of_ref": "indicator--6fe0c8cd-8798-45c5-a271-215da0c41a71", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294e2ef8-2e04-4ef2-9fe5-e871f9cb2b60", "sighting_of_ref": "indicator--513f13a9-05ae-45ed-9b04-0c642f35c169", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--744cf995-a427-4cc5-86cb-ed3727c496e3", "sighting_of_ref": "indicator--06ed9ecf-9924-461d-8bb5-82e6f8cc994a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f575d9-de90-4806-8c6d-c7456b3423c6", "sighting_of_ref": "indicator--5d3ada6a-4ed5-4430-9211-50eb8d740b46", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4b23e29-e9ff-4396-9bbc-0daa007c2054", "sighting_of_ref": "indicator--64dad985-5253-422c-a01f-89aeb57395c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00fcceab-5c85-4d1c-83f8-72bed7ee891c", "sighting_of_ref": "indicator--1f5de001-336a-4ae5-81de-d977b664e9bb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5509b8-bac5-429e-bde6-da92df8bfff8", "sighting_of_ref": "indicator--67935e49-7b7e-42b7-b33a-ed21b6a7d37a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed979aa-353f-42f4-a3a0-a2fb07242a4e", "sighting_of_ref": "indicator--d47476fa-4914-4263-aeb6-4b42c6d4dd83", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1cc762b-c4b7-4c35-9a48-553b206e13a2", "sighting_of_ref": "indicator--824e1fc7-95ed-47fd-8cf4-22cc3dd0f426", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a43752-3cbe-460f-b375-b65dbcdf11f9", "sighting_of_ref": "indicator--0dd5ea94-fc4b-4443-a23e-5ce264ee10f5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890fbc15-4b24-499e-af5f-03d18f9868e2", "sighting_of_ref": "indicator--8aac9e67-ecb8-4694-a5e9-d364fe723c3b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c1c44c-b899-4d52-b0eb-67d3e24bc2d7", "sighting_of_ref": "indicator--589fd068-1e6f-4504-bdbc-a42baf48c52d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84661d6d-6405-48c2-b44d-efdf3403afd8", "sighting_of_ref": "indicator--ab732dd6-1af2-4950-8935-31ae43c5ddd5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303bb67e-6604-4866-9072-e54ead4a5152", "sighting_of_ref": "indicator--b34e42da-f818-45ee-a1eb-7aeaacba9afd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbf13d7-b4ba-411c-be56-baa4004e151b", "sighting_of_ref": "indicator--ef47fd54-e7f4-4105-85c9-566ad0e888be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f5b4d4-32c3-4aef-b035-59a34eebe685", "sighting_of_ref": "indicator--531075bf-e223-458f-8afd-04b5662335c9", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28c949f-ec10-4560-98ce-c4630c582079", "sighting_of_ref": "indicator--04c1716c-bc5e-4b99-931c-5acb8e2e13d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbe5493-0e26-4a89-8735-0feb488e7f2a", "sighting_of_ref": "indicator--92121848-3798-4e34-a76a-9245f4cd76ae", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800aa3b0-3466-4dba-84d1-9a9c1e9f86cf", "sighting_of_ref": "indicator--76a95cc0-40c7-4092-b307-23f7e7942276", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dd872a-53a2-44c7-9338-a70af099ed65", "sighting_of_ref": "indicator--1ea42a15-5d68-494e-90bc-0a3c41451a3d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25019bf9-87e0-4676-838f-690551718c71", "sighting_of_ref": "indicator--e8fd627c-bcd3-4282-b81c-17d7e05a85cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801a1a32-fad7-4b98-a5af-2411cb11accf", "sighting_of_ref": "indicator--3ca826d0-085d-4abc-899f-480d7befa945", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8994abb6-9471-4e60-aeee-ec3c04cfaeb0", "sighting_of_ref": "indicator--c0b76f5e-99c1-4088-833d-44f0ad83280e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ac41e9-505d-4823-8373-9d77c26f23ce", "sighting_of_ref": "indicator--1fc94b5f-ef3b-4162-b60a-f49616839a9d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ded758d-74fc-4b44-bcd7-10ef7949c4f3", "sighting_of_ref": "indicator--23d70a7f-d376-47c8-ac31-76a9b3e971b8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57405a4d-2ec5-4123-ba7a-4f0296315ee8", "sighting_of_ref": "indicator--97a372b1-06a2-4fb1-b3d1-ed3991964d2b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40429de1-3366-4f2f-b87e-6be5d297d499", "sighting_of_ref": "indicator--a3d2e837-a607-4591-ad25-129e4e80c2c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2ede79-18e8-404b-95fd-a0369cff718e", "sighting_of_ref": "indicator--3d82cdd4-a95c-4fbe-9c20-cb6fba069ea9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ed763c-dd07-4985-b17f-19bc7d4c37df", "sighting_of_ref": "indicator--3246561a-8711-426d-9e97-d0992aeac8e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5a468b-9c9d-42e5-80bb-78ca8706add4", "sighting_of_ref": "indicator--fd871825-2baf-4208-a451-a07007b18f91", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d10efb-e5e5-4067-bcf5-3761f250b357", "sighting_of_ref": "indicator--e93288ee-5130-4992-b631-54833124e5c0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b705d70c-8ae8-4d56-9389-0907718944fa", "sighting_of_ref": "indicator--09172abe-c36a-4ba7-b07f-5a44ffe81f23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211f1744-d6da-40c4-9b4e-ea057e21d03f", "sighting_of_ref": "indicator--934ed697-2f91-484b-96c7-cbf2c13ec31a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d746a5-1413-47d6-99f1-8cf0dbe845bc", "sighting_of_ref": "indicator--1460a385-3859-45ae-80b6-fcbd7a2b28d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcf92f2-69eb-4646-8d29-1a205e0b7847", "sighting_of_ref": "indicator--72254a8c-ea43-4a1b-a480-d2a4017535ba", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f6db84-024d-4294-ae12-5e993e319751", "sighting_of_ref": "indicator--6e753bc6-4e37-47ca-922e-0942c1173473", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a03853-d8ae-4086-a272-3114fbb7c2a9", "sighting_of_ref": "indicator--b3909506-afde-4601-bd9b-b7166b679c0b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e328d3a3-61a2-4091-afd1-23d53ad034c9", "sighting_of_ref": "indicator--c9752bc3-6649-4408-8a1f-ef10d176f111", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88edab01-3c93-46b0-9998-82cd016f5841", "sighting_of_ref": "indicator--d4f66af1-07e5-4e61-b564-a13dbf2d5e27", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36375fbe-4eb6-4e7c-9cc0-f406d775c0d8", "sighting_of_ref": "indicator--b3f68774-83a1-4ab2-a07d-fd46cc76f725", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf2fa1f-90cd-4f11-a05b-b50bd097237e", "sighting_of_ref": "indicator--9be37b40-d882-44ba-9c9a-c75d144c5fd5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab0ab13-c6ac-41ca-8dff-4b2156ac547b", "sighting_of_ref": "indicator--3d0f97b4-5fdf-4ae2-bdbe-fb1574672d8f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f601de-37b5-40c7-97c9-ce691b41b82f", "sighting_of_ref": "indicator--72960811-4afd-47fa-991b-959f1eb27f37", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0610210-2099-4fc5-80fc-16c54606f10d", "sighting_of_ref": "indicator--bb6fb5a2-7536-4b03-88ee-d8a882f04380", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1d2f17-074f-4b49-8a51-a55a6e4c64ee", "sighting_of_ref": "indicator--4c210376-3489-40e2-9952-3eba5a3c480e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02ddd24-5f24-4be1-9338-0f3b5dfa85eb", "sighting_of_ref": "indicator--f6b67f5f-2d0b-4929-8ff0-cdab79430580", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e9ec83-4f39-46e7-84ef-bf7e9f8b2d62", "sighting_of_ref": "indicator--7bbec00e-f5e7-434f-a544-0f80ffb50901", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ec0196-487b-4ee2-bb31-29434710942f", "sighting_of_ref": "indicator--2cb3af4f-78e9-4b1d-9e77-c383cc57fca8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9c1351-bd5a-4187-8280-be750b17a24e", "sighting_of_ref": "indicator--30b17e85-280d-465b-a6fc-adc370ed05ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04f7bf3-2037-41cf-b890-5922057940b5", "sighting_of_ref": "indicator--4521f10c-48a4-4103-b76e-65cab833d8a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40357c21-3b20-4465-a3e6-3a5f9428f5b2", "sighting_of_ref": "indicator--5d4b5bdd-0557-4952-9569-ae17ce8254e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740ffbfb-90cd-4198-8b56-99d181acb72a", "sighting_of_ref": "indicator--1ef35023-12db-43f9-96cf-01c95cf4ddd0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81979815-4687-414d-9cdc-6462fd6a15b6", "sighting_of_ref": "indicator--e806dfb6-a53b-414c-b941-b91309bc9170", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb08b6b7-25b2-46f0-812a-bd5c2f665a85", "sighting_of_ref": "indicator--aed2a025-7630-4055-a831-e282053447cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17e8fd6-348a-4971-a06a-5f473e6eacf5", "sighting_of_ref": "indicator--0d3bf752-6f56-4532-8bb6-0d80c1e80fbc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a27cfb-658b-409e-8094-7a8a8826b401", "sighting_of_ref": "indicator--adece69b-4a11-432d-8d87-1837a81bb618", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd9804b-4d32-479f-bf88-6119a5a958f5", "sighting_of_ref": "indicator--a3dd66ff-decc-444d-a911-dbfd6e134e63", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40e53024-ab6d-4ade-8d48-818ade205fb0", "sighting_of_ref": "indicator--349afa7f-c6ff-498e-b2d0-d59cb78acf05", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc03a93-065e-4847-b34d-f108d599bd4e", "sighting_of_ref": "indicator--5ce620de-a256-4f1b-adc1-fa2db7360e13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5498acd-c23b-459a-b1f6-bd6d4852f10f", "sighting_of_ref": "indicator--ee5729cc-1396-42fb-bb07-abce6e1f4627", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec75eae-cef0-4cb0-81ab-c7b984ceff3d", "sighting_of_ref": "indicator--5ca6583a-356c-40df-ab63-0d972146ed18", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be794f66-e42a-43c3-866a-5e5a6f688056", "sighting_of_ref": "indicator--af102250-dc18-4bb9-9426-f13931adc1a0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeddf3ed-177e-414e-b045-f0626192445d", "sighting_of_ref": "indicator--0ac3e2a9-93ef-4ce3-865a-f6e837891efb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6197359-614f-4bab-87e0-19cb07353c9c", "sighting_of_ref": "indicator--25967133-6945-4f97-bb38-5bc1409ceda8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0fa1f5-8cad-48b0-9502-cccf58c60d4d", "sighting_of_ref": "indicator--d2450989-9e99-4324-8b31-ba0b990a3c02", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ab32cc-9966-4a0c-ba22-ce3b7b9a9a6d", "sighting_of_ref": "indicator--a75a4eae-e05f-4846-bfd3-5467619dbe6e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69307ba-3c7f-458a-874a-87813615dd0f", "sighting_of_ref": "indicator--56734030-74a1-4ade-bfa0-c89a9395c103", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98743150-d24d-4454-9327-2aa66779238a", "sighting_of_ref": "indicator--240b6d2c-ebaa-41b5-944d-984ceb2f3735", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240c6379-1b1e-412b-afd9-36a548d64756", "sighting_of_ref": "indicator--e3e3ba18-dca2-4f5b-a514-d94040cedfcf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5ec840-448b-4205-b02c-6157c128d5af", "sighting_of_ref": "indicator--c1f5957a-37d6-4332-9fb7-3d1c7e127630", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4599b9fe-b1a8-49ff-a714-203044bcf84b", "sighting_of_ref": "indicator--97df8379-6aa8-4d8c-aae8-211bf49e4833", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59df94ac-14f4-47fe-be3d-8d99dea407f7", "sighting_of_ref": "indicator--8939e1b1-1a95-4ee7-b1f2-89512231a77e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49afb4c1-3288-41e8-99e2-bfd726e9b7b4", "sighting_of_ref": "indicator--99566056-340e-4c45-a490-eca08a25cfd5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504d9746-55cc-4f3a-830b-e3a9933ebf35", "sighting_of_ref": "indicator--0fd6fe94-6753-40dc-bb39-409ea702eb79", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7585cd51-9a4a-4668-a98b-a262875b241a", "sighting_of_ref": "indicator--7ee7abe9-90c0-4496-9687-8e2994823ffa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca4a0f6-e4ea-4f80-a474-75109c24c861", "sighting_of_ref": "indicator--cf38247c-62e7-4772-af33-c57303bb3b57", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503abe42-baa5-4217-8ead-7cac8f02c65a", "sighting_of_ref": "indicator--fe6eb277-67ef-4657-b523-cc8479829146", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34fdd59-3169-40a6-a002-346b07127b8a", "sighting_of_ref": "indicator--785c35fe-8e79-4c9f-abcd-c76933ac90c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a22f224-4730-4e99-ba06-21397b369813", "sighting_of_ref": "indicator--0fa2d5d5-cdcf-4c13-9b2a-954eba42a9b0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffe7f1f-f176-4bac-a11e-27e1dac20fad", "sighting_of_ref": "indicator--dd37503c-4034-49fd-8015-139698f0414b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb716bb7-f9ab-4351-9a0a-f2b75053ec39", "sighting_of_ref": "indicator--e29f11d0-ef23-4990-8b41-b73812b4897c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2f6437-27f0-4cf8-94bb-2017f2dfce42", "sighting_of_ref": "indicator--11718a5b-5e89-4630-8388-f789a09f7130", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d510698-5fb5-455e-8282-04a2cdc3a55d", "sighting_of_ref": "indicator--1d10ea2c-93f5-4dad-a77f-1001974bf51a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2b3644-25bb-47d3-a121-d744e0c63fcc", "sighting_of_ref": "indicator--8d428f57-a119-45c8-a651-4f303d8d102f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9475f35f-022b-4703-81bc-28f0f50c4b9c", "sighting_of_ref": "indicator--bdbce0ea-d699-4960-8566-f2d48f4fce72", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5098cca3-3ca2-4651-9c91-5e763ff1fe84", "sighting_of_ref": "indicator--3f985cbd-1557-4cd5-97db-10764c819322", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abd4d0f-24cd-4c1b-9478-79fcc3db7505", "sighting_of_ref": "indicator--7d39c233-a520-4e86-a76f-022478aaf342", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3128112d-190e-4932-92d8-2519b74524d7", "sighting_of_ref": "indicator--5d2275f8-4881-41e0-b09c-95fd01fd6c85", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b069da-844d-4769-8ab6-8794d22a4bef", "sighting_of_ref": "indicator--250f7859-7b03-4a47-87f2-e913dc8ed45e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15300ae9-7056-4ca1-9a70-576057e90a4c", "sighting_of_ref": "indicator--cbb4879b-de4c-42b9-bf42-58995c670189", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee3d4b4-56e7-4fa0-8d3b-5cdcf57c20aa", "sighting_of_ref": "indicator--d295853f-1c06-4a10-b17f-fc98bf386d4d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fbc673-c2f6-4551-9c6f-ff25868e0238", "sighting_of_ref": "indicator--fcdfbea9-2ade-4379-b361-f441a25447ec", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69a1da3-cabe-4a80-80c6-e87836555f3b", "sighting_of_ref": "indicator--a3906214-eb47-4b99-8113-44993a9dc25c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57aa45af-6d7d-427f-a1dd-52f6af6e1ca0", "sighting_of_ref": "indicator--e57bb558-59ce-4e5c-9f77-03d15aac33c5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f083cdc-d062-4766-a5b5-a3dc9992f500", "sighting_of_ref": "indicator--75c8fd97-ff9b-485b-8a52-8b491954fcbb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28fe03f-03a1-4a3e-ad77-d3b1977c8db9", "sighting_of_ref": "indicator--dde9e423-a0ff-4780-a78d-36e509bb6aa7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540bb234-32aa-4c50-9b64-967a76a0567e", "sighting_of_ref": "indicator--e00a8bf5-2306-46ae-8355-e817cbc1cd13", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4eebfd-14ae-4345-8f25-1d80238fe75d", "sighting_of_ref": "indicator--0980a36a-751b-4ea2-b46e-63f49c6de8f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7168e5eb-78c9-40ce-b61b-10d252d74610", "sighting_of_ref": "indicator--74e75d66-4ab6-43b5-b7a2-36e8038f2b67", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f971ec12-71fd-43e7-a096-2206abe35b3d", "sighting_of_ref": "indicator--accc1633-82a8-4d3f-85f8-c751a27281c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7877d1f6-0246-4b9a-b04b-b203fbbe3f8d", "sighting_of_ref": "indicator--8008ab90-7cfc-4b23-9f8e-27683f8e1bfe", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f212cbe-2525-4b4a-87ad-fa63028b7088", "sighting_of_ref": "indicator--c705f7e8-1805-4a99-aedb-50f9076fbc28", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8624b951-172a-4d88-9b02-f3c857b306c4", "sighting_of_ref": "indicator--8bcdb98f-e564-49da-be0c-2cdaaf4de3d6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb3c32a-d85f-41cd-8157-e7121851c421", "sighting_of_ref": "indicator--fff03d50-92b8-4e94-baef-4929476e9a75", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c31344-cfb4-4342-8926-4451268ace8d", "sighting_of_ref": "indicator--fff03d50-92b8-4e94-baef-4929476e9a75", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d05ae6-b56c-4774-844a-18d9c74b5602", "sighting_of_ref": "indicator--266010ba-15c6-4e69-8479-033377b5fb76", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492017c3-5106-4479-a849-13d4d6777731", "sighting_of_ref": "indicator--76eb5cc9-2a9a-4616-aad8-7c4fa818e5eb", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06c4bde-b69c-40b3-82d2-4e8256fb8b6b", "sighting_of_ref": "indicator--76eb5cc9-2a9a-4616-aad8-7c4fa818e5eb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f88befc-9222-4c1d-b569-fba31cd28273", "sighting_of_ref": "indicator--0c66b713-5ce7-4881-9d99-126548b20c4b", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5955adab-fd31-44c8-afac-3b607cefc009", "sighting_of_ref": "indicator--44bbc21f-5aff-4699-8749-a96c0b7d836b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bafc34-8e33-4f91-83c4-48c228c5bd48", "sighting_of_ref": "indicator--a400373e-afbc-42f5-b478-912314004b65", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc6ebdb-42d8-4fc0-830f-70573367b663", "sighting_of_ref": "indicator--39402e1e-cab9-4606-a4e4-d9a2089a7b7d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcc0b448-cf20-44e8-b35b-7b04fd2232ab", "sighting_of_ref": "indicator--01dfd02f-1dc0-4733-9b7b-a1b07a569f83", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d00952d-5fe7-48bf-95e0-4736273421b6", "sighting_of_ref": "indicator--9ec66c89-b840-4560-95ae-42fd90badb06", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5062a4cb-3deb-4f1a-9c97-78e2807171a2", "sighting_of_ref": "indicator--5af9a3f2-5f2f-4645-9404-420e03dff528", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a5f5e4-b3eb-47e9-9607-445ff0a7e0b9", "sighting_of_ref": "indicator--1e181f97-3e4c-41d2-97ab-e231e5997f50", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da89232-26ac-47aa-a966-3a061c930fb1", "sighting_of_ref": "indicator--d58e6df5-b1e0-4725-bb53-98d1b4065c77", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb03bf1c-2027-46a1-a8c1-1599dbdb63da", "sighting_of_ref": "indicator--a6b2028b-5559-4b3e-969d-96e3f43882a4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e007a3b-3075-4325-bad2-c0fe2c5098d7", "sighting_of_ref": "indicator--9e651993-23bf-4bc8-aaad-490da6ea6a88", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e2bb6c-d25f-490a-883a-14be000e094d", "sighting_of_ref": "indicator--0c5efd47-1592-4831-b3a5-400eba5ff719", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53d3d33-f8ec-4c3c-9eda-9d35b40bf448", "sighting_of_ref": "indicator--ed79147b-fba0-4798-81b0-5d39f1cd9df4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f834f5e7-851c-4f98-836f-99c46ea5fba8", "sighting_of_ref": "indicator--9364a3f8-c36e-4f29-a785-bf50d60b15ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3bbded-7b47-4fbf-bfde-62dc62a91e3b", "sighting_of_ref": "indicator--dbcf7b9d-5ca8-41ec-82bd-04e5223e0242", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3f0f27-be2d-44a6-8f0e-d9d1363672f6", "sighting_of_ref": "indicator--ad6bc147-730d-4c09-ba62-f436f788cdad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--579cb9ff-9e50-4dae-b2c4-2cca9aa4d25a", "sighting_of_ref": "indicator--6b274bb2-d0dd-4ca0-bb27-13850f7c0a41", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77691095-d92d-4bfc-8cb1-1653d0534b79", "sighting_of_ref": "indicator--ea10327b-b957-4ddb-89d4-d96b845379a2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f825d0-d98a-4ab0-994b-19816178ff9e", "sighting_of_ref": "indicator--bcad481f-ad77-42a3-8b76-1ce1f7de672d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150ab5b2-9188-43cc-acf7-9f5bd526b338", "sighting_of_ref": "indicator--1eb1cf19-d6d6-4d86-b7a5-9c938dbe41cc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79068976-9af0-4a63-a619-7be62b47b267", "sighting_of_ref": "indicator--3b9d2c22-b43c-4b77-911a-6b3667b8814e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25b8c4b0-813d-4c04-b5f4-4a7cfe927c39", "sighting_of_ref": "indicator--d7f51be9-51b5-4947-9c9a-e7dd34c27ca2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570e0b19-c1db-40db-a56e-0288a7f19c6d", "sighting_of_ref": "indicator--dc0fab7d-c805-4030-8ceb-40963ac6a430", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc58304-303e-4a24-abf1-ad836f1f5c19", "sighting_of_ref": "indicator--df39c27b-b478-4396-9a91-55b9202d1285", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--162f62b6-8d8e-42e0-9de4-01c1b726c07e", "sighting_of_ref": "indicator--7167df6d-6394-4c2f-bd20-42c089a7ea78", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bb8f50-8390-4cee-8fba-98a08b2b639b", "sighting_of_ref": "indicator--479c4cf9-7385-4a59-948b-1997cdfbaa87", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a1880f7-4700-453f-acd8-2658d6f111ac", "sighting_of_ref": "indicator--3a396e29-7424-498d-a2a4-826af649bfbc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898877df-5839-4a4c-902d-4666feee41d8", "sighting_of_ref": "indicator--55a0749a-d641-4544-a789-59a5640eccd4", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c3ea67-437b-4aa4-8d6e-25b94275e8b3", "sighting_of_ref": "indicator--2a358d0f-1c99-4a04-be6c-af2b38f73b29", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480aa8b5-34e3-4fa4-8af7-71c733fed106", "sighting_of_ref": "indicator--dd5cf7b7-abf4-4151-9f71-89fbba6d2a44", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b78c4b6-065c-4a95-ae61-d54afc170eda", "sighting_of_ref": "indicator--68345459-2037-4b6e-9859-9aa923299b5c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9d3074-9063-4c89-97ee-9a7bd2ca3803", "sighting_of_ref": "indicator--b519dcd1-bed6-4da1-9491-2ea777bdd1a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1126b256-1212-4ae6-abba-2b7c2ec1fa62", "sighting_of_ref": "indicator--fbdcf79a-90ba-4e89-a1d9-31cd287ba3f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952d5d5d-42bb-43f9-9367-865d3cb74653", "sighting_of_ref": "indicator--99e0eacd-5177-4a8d-93e7-231c1d89d955", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157e0b4d-72b1-47ee-916f-6219a55d0c12", "sighting_of_ref": "indicator--5b6fdf6a-580c-4c9a-841b-0a6882df27b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e0388e-2e40-4dd3-8578-c4bfc74aedd5", "sighting_of_ref": "indicator--75e212e1-e208-4a4a-af38-ce28b9b2e5a3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9292b7e0-d287-498a-b481-f6ad8f819083", "sighting_of_ref": "indicator--875d5624-8920-401b-b2aa-a1a0bcc9c332", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e2efb4-ec29-47db-a8f3-3bce9a60021d", "sighting_of_ref": "indicator--875d5624-8920-401b-b2aa-a1a0bcc9c332", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6101bb3-f11f-4bb2-b401-87f3f77287f9", "sighting_of_ref": "indicator--9a762a0d-65e6-4dfd-8488-360b086d67b1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516b5ab2-2efd-4548-99f0-f39e7e68370f", "sighting_of_ref": "indicator--a6f2ce7b-46c9-4f11-b59a-f3d2571a8911", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef9091b-1ae1-4bae-bace-51c4c016f2dc", "sighting_of_ref": "indicator--4c8f9cd7-55d0-49ad-b9d5-8e0d8c2a12aa", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49cae4b-4a49-43c4-96d5-fe8c4540200f", "sighting_of_ref": "indicator--cb489d34-97de-4657-87c7-a606b8790795", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baf79ce-397b-400e-bc98-f087d72dc53c", "sighting_of_ref": "indicator--b514af9e-6cd9-4983-bb6d-b270aa95fcf7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2597f7-9e83-4ea6-aa9a-02c5ff3de3f1", "sighting_of_ref": "indicator--2fda95a2-1670-4e7b-b753-7498310ab1a7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e74a18d-4de9-4aa5-8895-e3a5387b2e8f", "sighting_of_ref": "indicator--6fc0e6c9-786c-4f43-8d4d-651fca6bab15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63344f2-d027-4475-af95-1da146d33bc2", "sighting_of_ref": "indicator--2766fac1-93e7-4958-a6e0-4225f39dd72d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b0e88c-7fda-438f-9178-33e279450ceb", "sighting_of_ref": "indicator--bdfbf23f-231e-470b-9680-6424a243273a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258a63a8-98dd-43e8-84ad-c1c3f3dc1048", "sighting_of_ref": "indicator--4259c0ab-4a52-4c6a-aa8f-17d687230653", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612d142c-873c-4a06-817b-6bb4eac32903", "sighting_of_ref": "indicator--142e565a-2549-4cb9-aff3-37662084d1eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b749be-611b-4655-8b32-f7e5ee5e5729", "sighting_of_ref": "indicator--9b285761-fa34-4c93-8336-334a74a8969f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10dc6c39-3f57-4aed-972e-6987acb4396e", "sighting_of_ref": "indicator--a5228f31-45f5-474c-8127-588874285705", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786ea555-794d-4fe3-ba9d-effa7f31edae", "sighting_of_ref": "indicator--f866057e-11de-469b-bc7a-c179f90d3d24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b0cc53-e24c-4e61-814f-43b6cda9c0f3", "sighting_of_ref": "indicator--321da151-f437-45c4-aa44-40d8ddd66b14", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce75d1d-05fe-45ac-83ac-9884fd6f5744", "sighting_of_ref": "indicator--8e61e65f-81f4-41a4-ac3c-dd9fa71a05f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea55f74-3ecb-4e78-b620-f44b291085df", "sighting_of_ref": "indicator--757f15b6-c70e-40f1-affd-b0dbbfc1a66a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dae06e-ad6a-424a-8e4e-f5cfb0ab04f3", "sighting_of_ref": "indicator--e66a791c-ad8c-4c2f-90dc-562e407edd75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669bdd52-ee04-44e0-a04a-a7b9e99858aa", "sighting_of_ref": "indicator--4930fa0c-7255-4bb7-ac19-b5402f67f575", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9a1d6b-46d7-40f4-a917-1083e2d7145c", "sighting_of_ref": "indicator--b873adb9-27d5-4055-91d5-d827ce2b4749", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d436f32-19fa-4a09-9329-fef87ed5dbe7", "sighting_of_ref": "indicator--fe7f2575-e894-474e-9259-b6a98e743e20", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e5a598-1175-4ac8-be8e-21a9eab321ba", "sighting_of_ref": "indicator--cc308460-00dd-4361-9299-a0bb9e43f9a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cce794-7478-44df-8088-553dfa1ee6fa", "sighting_of_ref": "indicator--366eefef-19dd-4a2a-bc5e-490786c23e9a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b997d41-ba80-483d-b8c4-0cf00b536b07", "sighting_of_ref": "indicator--e77de2e2-41d1-4588-8fda-0b667bbd8c29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8832a9a6-4bf5-4c63-a838-2b152bf3198d", "sighting_of_ref": "indicator--2c5114c3-4c86-40f1-892d-94c6b09c20fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd774bb7-4dc6-4ebc-8ab1-2cb7ee03ad82", "sighting_of_ref": "indicator--a27e0eaa-3e5a-488a-b8c2-585275dbb087", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b6333a-fad0-4cec-b136-e4f23dc5ed8c", "sighting_of_ref": "indicator--fd0471b0-662b-4859-a77f-8a19cf14258c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb1f6e5-2c90-4ec5-889f-f4af618485ab", "sighting_of_ref": "indicator--3fe3794d-7ae4-4568-9fc3-eb7331c4073f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcb56ff-504b-4c51-b649-4ecef13d8eca", "sighting_of_ref": "indicator--9eb7ddbc-00cb-4f5f-8954-550a7b9a1ed5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081e8bc7-83c5-4d1e-b870-5556a19d872d", "sighting_of_ref": "indicator--8fa00612-010b-405a-bf61-94be80b49e53", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d29ae9d-13f7-474e-99ba-23bfc3fc838f", "sighting_of_ref": "indicator--e58e134f-a816-4ef6-bae5-cd7409511229", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05153382-413b-4e63-b8be-ea8978761ea9", "sighting_of_ref": "indicator--1191e76f-3d9f-47d8-a1f3-3c765b33d746", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02119f4-5811-404b-8033-9b67ee3310b0", "sighting_of_ref": "indicator--20300759-b159-461c-ab8c-16da6a39d739", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e768907-af66-4cca-8a5c-48477e9207a3", "sighting_of_ref": "indicator--d7243bfd-3203-4972-80cc-d3a502d4d11b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e18a2fa-73df-4eb8-8d11-27f32af15946", "sighting_of_ref": "indicator--4c6c3d96-5bab-43b4-ac4c-bfd8f7e32f42", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3f2e6f-8c96-44e6-9736-79270b170916", "sighting_of_ref": "indicator--06ef60c2-7a26-4c96-81fa-f280cfe0416d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26e8ad9-1259-4a4d-be35-2e83f008368b", "sighting_of_ref": "indicator--806a0057-c252-4c5c-90bb-f231a44c3c83", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d21f06-67b9-4e38-9f53-b0045c8bec0f", "sighting_of_ref": "indicator--5caa5467-27b6-4d73-8226-16ac27d6a2f3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80772a59-b346-41a4-aeae-5bc0404eef77", "sighting_of_ref": "indicator--b4abdb75-9ad5-46bf-aec0-f74df480153b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f34143-50dd-491a-8410-d93480edf5e0", "sighting_of_ref": "indicator--032cbbfd-e94b-4e32-bc6e-c124aaf8d144", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8cdbbf-7d7d-46b1-ac29-82b6fdc7a608", "sighting_of_ref": "indicator--0ee4e85b-7e8a-4bcd-ba02-2039c6a8b248", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078fcb1f-eb3e-4dd1-af14-1a8c9fe36682", "sighting_of_ref": "indicator--7a0bf4ea-f527-4b2e-bf8a-05f975444efc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b26f1bb-e348-4bdc-bb50-eb4e4420baf9", "sighting_of_ref": "indicator--07088727-d898-4640-9beb-6f302be4d0e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a88971-ddeb-43ce-b151-5eddfdd2bad4", "sighting_of_ref": "indicator--a7b85fb5-2ea1-4ee7-94d2-9a26f7c12922", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b24f361-0c95-44b2-85ae-fbd55f74fbf5", "sighting_of_ref": "indicator--771cbd4a-0265-4d8c-b730-f9a7befcd437", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0477da4c-99b8-45a1-9ae6-720f11276ee2", "sighting_of_ref": "indicator--f64b1b66-219d-4d13-a60a-fe717c255647", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a4d127-599d-49d0-82eb-98f40ffbdba1", "sighting_of_ref": "indicator--8f51e134-3e6c-4607-9b8d-4b368547a393", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1c3cbd-2845-4b15-8b52-b506ed7abd14", "sighting_of_ref": "indicator--f4721663-e769-4337-bf2a-a7602de33138", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49023cc9-28c0-41d0-b5a7-2ef56479ad06", "sighting_of_ref": "indicator--0aa16f4e-0fc2-4b9e-9cf6-bc55d95ce152", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adef3da-98ea-4d2a-90f6-88df5ceeafd6", "sighting_of_ref": "indicator--67230275-1866-423a-98be-f9cd22b72d1a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4011c6d1-73d8-41b6-b2e7-c25da4676cfe", "sighting_of_ref": "indicator--eb3eed98-815a-43a9-abd3-b29b56e0f3a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed403719-66f0-4eb0-afe0-23b061516919", "sighting_of_ref": "indicator--62719433-4952-47e7-aeea-96131e6f2dad", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca3c087-4942-4ad6-a62e-6e1dbcf28e0e", "sighting_of_ref": "indicator--7290b522-2b75-49e0-8c76-1b471da82c24", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bcd762-cdde-4eba-8f70-31b7c30d69bd", "sighting_of_ref": "indicator--55175b9f-2db1-4c6e-b47e-c1650946c30f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40d4eac-9a3a-46ea-9f61-ad458b68e807", "sighting_of_ref": "indicator--8bd450ff-d369-40a4-8f64-5800f6cf0402", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8510d23d-90f2-4008-96d2-a183b96b6f06", "sighting_of_ref": "indicator--251b9b48-584f-4d9a-846b-fb3d518d6c38", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05c04be-83cd-48d7-b960-7b9dd5463437", "sighting_of_ref": "indicator--203a9a92-96f7-496a-9f0b-08faed32e53c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a94cf81c-b70b-4152-8a0b-ba32ee468035", "sighting_of_ref": "indicator--c1a79954-62de-4221-8895-b845459c25e7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3101bfb6-e94d-434a-b15e-e558bab4a8de", "sighting_of_ref": "indicator--d3c55e48-b520-4238-a4e4-856e8aaf5a03", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9011fc4-7612-4aea-b0f8-194edc62bfbd", "sighting_of_ref": "indicator--63be681c-e3c3-4d5f-9404-52b1a2c82d3a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb54a05-78d6-44ea-8eca-4a3a9a19f2c4", "sighting_of_ref": "indicator--d3c4f71d-6605-4d17-abb4-9fc4f5793100", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3062fac-3d4d-48c0-905c-0c1f8f949814", "sighting_of_ref": "indicator--1a89577e-3c87-495b-b5df-186d6c0a81d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147d6d06-80e7-490e-bc6e-30100c1c8dca", "sighting_of_ref": "indicator--8076c582-d5d8-424c-a586-8be35abf512e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3908bb2a-b091-4a52-ac58-936b65bf780b", "sighting_of_ref": "indicator--df1a0051-eda5-4a10-9f7a-14acdfd438de", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7184cf18-2a5f-4b40-a9b4-b44120ca568d", "sighting_of_ref": "indicator--09719072-8d6a-4567-a3bc-1205410072f1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0719c793-7cb2-4f97-8f89-e8b67a59f07e", "sighting_of_ref": "indicator--b5c0580e-1325-46da-bf1e-9ad4304fed12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654fef80-b7ed-49cd-9f70-578451ccbac2", "sighting_of_ref": "indicator--cee04d44-9c5c-4456-a8b9-21b205ced0d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b493ad1a-a62c-4dfb-b3d2-ea492806ca77", "sighting_of_ref": "indicator--dd4f760a-62b2-480b-a2c1-78a522025f1e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811e6d50-b1e1-45c7-ab15-cc557087fce9", "sighting_of_ref": "indicator--b7f82131-775c-40c6-86bb-67367ec66928", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f03ae3-acf8-41b5-b407-42e3913a984f", "sighting_of_ref": "indicator--f5279207-9d52-4550-be4d-f5f2e1735647", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e126d9a-355c-4913-9e91-b8f9b4b785af", "sighting_of_ref": "indicator--0f658523-a85f-4439-aba0-72620352d10f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9dad87-89da-4ec7-8585-c775da385d6b", "sighting_of_ref": "indicator--381ef34a-0cff-457c-a4a8-ec2f58dd41fa", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29562dcb-a8ab-4d68-bcbe-a7a4c3acef37", "sighting_of_ref": "indicator--ecd84185-3f34-43d9-9c61-34a2117bf4e3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cab4be4-c956-46bd-b3fc-8e32c06dae5c", "sighting_of_ref": "indicator--7d23ce6f-83fc-4e1f-b9df-0d240002fa2f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb376d0a-c1a6-47b1-b901-6ced93f1d520", "sighting_of_ref": "indicator--b6edd09b-2f44-44d0-8be9-d78010242200", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18229fcb-188d-4afd-88ed-cad4c23e021e", "sighting_of_ref": "indicator--51216920-d7ea-4c3a-8446-57ac3051ef56", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9eee8bc-dc01-406d-a850-3b974e2085e9", "sighting_of_ref": "indicator--5dc9b231-ef00-433d-ab72-2a196ea5ec14", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947611dd-a925-4941-a592-02497383ad62", "sighting_of_ref": "indicator--5ab3582b-0e99-4ce3-904a-33c649fab70c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0550f5ad-ce81-4b7f-ac98-d3b593076b8c", "sighting_of_ref": "indicator--bd3da77b-8f4d-48e8-8c49-66b90b43563f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba458a4-09df-4432-b8f7-64145c5fdd5a", "sighting_of_ref": "indicator--de572c48-07cc-4c46-b1c7-8d5c529aaf71", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b641d3-e185-4155-a306-c252bfad5478", "sighting_of_ref": "indicator--1c18ff4f-a7a5-40fd-8b49-bf35bb1da859", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3aad48-a505-477e-be98-ce2913642be5", "sighting_of_ref": "indicator--1aa2e037-cd53-4ab9-a7e3-5341f1a3e6ab", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60350bdb-824e-41cb-a025-cd119b5d3563", "sighting_of_ref": "indicator--f78c412c-ea8c-49a3-ab7b-cf84348c3372", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e23490-ec48-4d63-9394-f6edd4c07a73", "sighting_of_ref": "indicator--b17a7fd4-29bb-4168-87f2-49b17109c2e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea153945-a293-4edd-9884-0f34fd727e2b", "sighting_of_ref": "indicator--3a740c75-fd6b-4be5-8a16-469a34c0e741", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e722443-ed6d-4f91-8f23-ee6080b4b4d2", "sighting_of_ref": "indicator--e9615661-da76-4e9c-8583-a004fa111e04", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98db5435-0ed9-4c00-8341-7013457063a1", "sighting_of_ref": "indicator--f421a7e9-6aa5-4879-96e1-438f2d75a91a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed712af-5bdb-4d2c-b5b7-88792fa77412", "sighting_of_ref": "indicator--a4ed07e6-7d98-4da7-856a-e8738241fa22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f1ea56c-7029-4dab-82bb-2536ae7b6b7c", "sighting_of_ref": "indicator--afdc53a6-980e-4ea1-afd2-504dbd73396a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379ada53-f635-4d94-a579-cad4d96fef1b", "sighting_of_ref": "indicator--ff0f203b-8de9-40b4-912e-5fc25434c95a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f68f1e3-7d6f-4c82-bf64-9c06ec091594", "sighting_of_ref": "indicator--ff0f203b-8de9-40b4-912e-5fc25434c95a", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59571a8c-4196-435b-942d-a21002aaac59", "sighting_of_ref": "indicator--e04aea7c-58d6-48d3-bec0-732f6b5fb9a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f05ee1a-1751-4544-b0a2-6adc6df43529", "sighting_of_ref": "indicator--be9c22ea-5d56-4474-b331-0edbc439ded0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fa92ec-6d8c-4acc-9fdd-7cd8cf99f4ed", "sighting_of_ref": "indicator--dca85eec-d1b5-4913-8990-ae42df6853fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7568f95e-cb98-4707-94f2-be65fba555df", "sighting_of_ref": "indicator--731e502a-cfeb-46ca-884e-07b2a7c63ba2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3049b7-13af-4afc-8349-3cee6aaefa71", "sighting_of_ref": "indicator--cf87ccb9-b745-45ec-96c0-03fda5201027", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ffc7df-7a46-461b-8767-ef1f1a884101", "sighting_of_ref": "indicator--e9621c42-3588-4f2d-bee5-70d55eba2e17", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a324a1e0-c494-468c-b1d6-d8411c5309d8", "sighting_of_ref": "indicator--01d34cd3-0690-47a7-8eda-44e534ce2c2f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87845816-2e69-4ec6-aee5-a4c693c9569f", "sighting_of_ref": "indicator--ecb65876-f9ef-44b9-a971-661dee6b2a0f", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f68159-60c1-495a-925e-cbadd54b76c1", "sighting_of_ref": "indicator--5fad3b92-0201-4a46-93c9-1a495c5771dc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246e3f69-1ce6-4e01-95b5-a8bbff59d89d", "sighting_of_ref": "indicator--3ab20842-b01e-4ae6-91bc-af43fc55c4a6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6c108a-123e-425a-82a1-0547d0b57706", "sighting_of_ref": "indicator--6afc251e-b16b-46ea-87b8-4388878c8c22", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac3b413-1eca-4858-86c0-f0d007c131e0", "sighting_of_ref": "indicator--5272afe6-9b58-43c1-a92c-c6cee6020777", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf7999b5-1e38-466b-8f1e-4b08cfa57a75", "sighting_of_ref": "indicator--3a9dafc9-2086-4ee8-bd8b-110513c46927", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a837150e-a4a4-45a3-a370-2277f0d0e4c6", "sighting_of_ref": "indicator--68e1180e-a0be-484d-9b84-cc88d2322b58", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0afb10d-be20-4a9d-8366-42aa66163235", "sighting_of_ref": "indicator--371df960-a12b-4faa-af8c-80029b6009c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3119d8-7ec8-4759-ac60-9ac1ff53e28e", "sighting_of_ref": "indicator--805ef5ab-2bcc-4e64-b24d-56786d654ada", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c8f596-fdec-49ea-855c-3380763e4046", "sighting_of_ref": "indicator--9725668f-4ba7-4e3b-b139-651a68521845", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b678393a-5797-47a1-a958-146f8b4e3640", "sighting_of_ref": "indicator--d406d6f2-a09c-4670-861e-853e3c49eecb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591a6897-f28f-4d47-822f-2a59b9338f6d", "sighting_of_ref": "indicator--d3c76584-b838-46cb-bc7c-a258b11f77f9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff8662b-1dc9-41c8-bcb7-507f31ded650", "sighting_of_ref": "indicator--fede765e-4827-413d-9d97-d015afdbb182", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc77c836-12e1-40f9-b0d8-b7882c113f69", "sighting_of_ref": "indicator--60b3180d-2c04-4f0f-be6a-d64ba925a18a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e12fd17-d754-4437-861a-dbf27e37fed3", "sighting_of_ref": "indicator--0bd5412d-3304-42c0-8f33-89a48c0030e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1e9401-485e-42da-a589-760b5ca5d2d3", "sighting_of_ref": "indicator--2e70279f-33a9-4ea7-b7ea-00235ad9537c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf3faf7-67b6-4ea8-9447-2c8bd5f41a1c", "sighting_of_ref": "indicator--0fb99bce-2b6c-4c95-b4ff-495e920bb7f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f730ca-538e-44af-8896-bf1178a82fbc", "sighting_of_ref": "indicator--80ec1559-a4b2-4e4b-b222-d38ee6d50857", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6759328-013a-4d64-9a33-7365bf6a1faa", "sighting_of_ref": "indicator--7253ca02-13cc-4130-9e48-e2553824d827", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a2e5ea-2b5d-4164-968d-0ac48f817cb8", "sighting_of_ref": "indicator--58b2c8f3-1656-46e5-9ba9-0740e5746f70", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b50d5e9-5924-4186-98ac-2da87cb7ebfe", "sighting_of_ref": "indicator--ec4a7711-cd11-4f4c-8fd2-b50af491f760", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72647d9-c9fa-47b6-9528-a1f2f455996a", "sighting_of_ref": "indicator--f427936c-de63-414d-8efb-9f0a69f7b236", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92549c73-9773-44a3-a4c7-4bcdec046d35", "sighting_of_ref": "indicator--88ab8a95-022d-4a6c-a7a9-beac073be21b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6092abca-1330-4635-ac7d-43db938e34c5", "sighting_of_ref": "indicator--c6a04135-5174-4ca8-bdf3-7d80dea24ec9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cb926f-f862-47bf-8c86-6c3f998b262b", "sighting_of_ref": "indicator--8e9d3d15-7f36-4ce3-a011-e8fdab157a6a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29920fd-73c6-4ee1-a96f-f59d088a862d", "sighting_of_ref": "indicator--1440a088-3594-4033-b16d-082dc8e1e99d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef77910-7bfb-4d12-8abe-48e817bf5f2e", "sighting_of_ref": "indicator--9cf62181-6ebd-435a-91c6-b156207dbcc7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c081314b-592a-42ba-9b5e-41c980fff5bb", "sighting_of_ref": "indicator--f1d073a8-27b5-4ff8-a5d9-8e445c9c6c6b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e39673-65dc-4589-8724-d957968708e4", "sighting_of_ref": "indicator--0c0fb965-5543-4049-a988-f23d2f56a48d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea9e32b-aed8-4210-a9a7-9204b482fcac", "sighting_of_ref": "indicator--7360fbaa-1263-4f07-8f76-901a960a9fcb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f12197-9a4f-40dd-9d06-f7be28b62b30", "sighting_of_ref": "indicator--0d22ee3b-0200-456b-9eba-1dabbe89c999", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e934320-718c-4839-bef5-47f415fbfae6", "sighting_of_ref": "indicator--ec3046d8-8098-48d5-9d7c-48051443a153", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d1d14a-3ec3-4cae-bbd3-220293f8f9e6", "sighting_of_ref": "indicator--6170a0c5-8915-44df-a2d8-dcb6119b3e60", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cd8b90-6de9-4953-a8d5-485103e89d73", "sighting_of_ref": "indicator--e8566064-9034-405b-adf3-0c0d179a33d5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef892dc-295d-4242-a731-127986de3459", "sighting_of_ref": "indicator--f992abca-bdea-46d8-b25d-4e629558b5c7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0f78cc-6ff1-4389-8c14-c073cc2afbdb", "sighting_of_ref": "indicator--2521111f-b1ba-4172-b7c5-271753073712", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4325fe7-542a-4b8b-98b5-6f0239c198e9", "sighting_of_ref": "indicator--d8976320-0201-435e-9fa6-acc07fe1de76", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fe4d37-cb58-476b-913d-515fe9e95d2a", "sighting_of_ref": "indicator--613e0fec-3a0c-4330-9a5f-10c0d0f55eb3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0f5983-b89d-4e2d-9ea0-7d228f646cd3", "sighting_of_ref": "indicator--5bab73ec-c9d7-43f0-8df6-a6fc2c09a1f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49abfb2-f416-4070-9793-63adfe02126e", "sighting_of_ref": "indicator--0b6c05ac-9e5a-4b3b-a5f8-9dc5c2cd8bdc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b65c98b-c0a8-4b32-ae4e-bc6caa14b3f5", "sighting_of_ref": "indicator--53c32e90-bd2f-484c-bee5-7c90c3c94262", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acc0e06-33c4-484e-8486-fc9d5e7f662f", "sighting_of_ref": "indicator--2ee3b802-e643-43bb-af96-cc5fe5faff23", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12bfcf3-659d-4104-b81e-15702c4a9ae3", "sighting_of_ref": "indicator--04d5a466-1ad3-4d48-b3cb-3a04dcc353a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdedd3be-14e3-4f80-80d7-1e0a35aeee24", "sighting_of_ref": "indicator--8fd4ae09-e9d8-4bb8-b6f7-12929cd9e5d9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c87a629-ad1f-4e4d-9db7-06ea227ee786", "sighting_of_ref": "indicator--d47da40e-f140-4a69-83d2-78ab8211ff33", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d2b2cb-b3ac-49d0-b7cf-508320651816", "sighting_of_ref": "indicator--0a95e62c-4126-42bc-a94f-4ddfae0b18d3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c2b891-36dd-4c9f-8c50-cf00612fd4bb", "sighting_of_ref": "indicator--1d91f877-f19c-4d95-962e-a86c958828a5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ca0441-8fa8-4fdc-bb51-879bb661ff4d", "sighting_of_ref": "indicator--d0fe3faa-3a5c-4f5f-822a-af06f49a4cc6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c26ebb1-db13-4e1b-83aa-7d7853cad11d", "sighting_of_ref": "indicator--ec4ad1c5-a22e-4c83-85de-263685073016", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5b41ae-d8ec-433c-b493-94de7b1e0626", "sighting_of_ref": "indicator--ed225f37-5ad7-4769-a7ff-3023c17474e8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ac1e3d-5cfb-494d-80d2-e5e310f1a13d", "sighting_of_ref": "indicator--7042c5be-b6cd-437c-80dc-07ad5ed93d8a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d630cc-a5ff-4e70-83aa-486cc6fab57a", "sighting_of_ref": "indicator--c0d66576-3722-4aa7-8d4f-2935ef791137", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73efce0a-3540-4773-b0a7-e10300b938fb", "sighting_of_ref": "indicator--57b74f37-f9e5-46c1-9f95-e2a605db769e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60d0b61-9ded-4d7b-9f06-75d2cd296095", "sighting_of_ref": "indicator--bce6e7bc-f3d3-48ea-9303-904c17f445ef", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cfc83a-e1ae-446a-90d2-5b0fbe9f0fd8", "sighting_of_ref": "indicator--60fb0b51-2239-4965-b33a-f6387dec4e90", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856d2828-3bc2-4ac1-ba19-37c8c0f9fff4", "sighting_of_ref": "indicator--42c17339-a7fa-41f7-b4f9-1e056eaea6da", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccd6b1f-4336-42ca-a418-432e8396aef7", "sighting_of_ref": "indicator--0221d500-a689-44a5-a132-056a8d9860fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cd932f-5eee-48bd-a70d-7c90780bdba8", "sighting_of_ref": "indicator--943551a1-64a8-41b6-a04e-1556879d1287", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f6d303-a840-41cf-9cec-5353e3a7b90b", "sighting_of_ref": "indicator--eb4af149-d870-4caa-b893-ea3ed1843fbf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee74a0d4-6ddf-4698-934a-1dc6107879b1", "sighting_of_ref": "indicator--ac221dea-088c-4ee6-8563-7fff16f6f1e9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17da007e-2eca-4318-bf18-c0a9dfb27960", "sighting_of_ref": "indicator--3e37a363-1f41-45ff-8bda-e2d7a1f49229", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a1e09a-8e67-4ec8-8e58-639dc1700630", "sighting_of_ref": "indicator--7573e8e2-4d2b-4c7c-aa88-9a936bd9b7cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42baecc-e077-4f4e-b25c-8b61f6ad005a", "sighting_of_ref": "indicator--ffc577e1-0c2d-440d-b429-4bf1ca49e7b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f9cb98-046b-4054-bed2-bed24f117be1", "sighting_of_ref": "indicator--23ce8ce2-5d5b-4e32-9725-331e8beba5b6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80e462d-4df4-402e-9d48-b216bd4b0c74", "sighting_of_ref": "indicator--44321c25-f7cf-4c97-9439-d2865d385339", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c99d13-d457-4164-9c78-fa152b595020", "sighting_of_ref": "indicator--a16995a0-8bbd-4529-8298-965b8bc2bced", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49330006-00b2-40c8-961c-bbc882e8a863", "sighting_of_ref": "indicator--24cd5441-d30e-4b0b-aa0c-8377b59a09be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ede9d7d-2618-47ac-b119-8381634485e2", "sighting_of_ref": "indicator--0dc649c2-7568-46cf-b8b5-718bae091720", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691dac19-c45b-4203-b15f-fda62fe26ddf", "sighting_of_ref": "indicator--07efb429-159c-4a1f-b276-976247befecb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900c68e1-d2b0-44be-b800-548e03c9a9e2", "sighting_of_ref": "indicator--ee594681-f573-4e51-82a2-4779e4aa90cd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511154be-b0fd-46ba-810c-a817da802020", "sighting_of_ref": "indicator--10840ecb-f861-4f71-8e87-2efd1f1ce7f7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36e38355-24a3-4412-bbad-06d82deaef36", "sighting_of_ref": "indicator--3f007660-44a9-4d4d-87f3-f02982a310b1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1a6d16-dc65-47d1-922e-0ba0beb3b0e6", "sighting_of_ref": "indicator--8669e821-2f04-4d72-b4ec-d980e27a69e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05050be7-606e-4cc3-a02f-9826be767a5d", "sighting_of_ref": "indicator--c585fd66-8c8c-483b-afcc-42bcee19a118", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--580abb63-20c6-48af-beba-34f6fe803095", "sighting_of_ref": "indicator--8074b340-c062-4347-bf18-91f00a53a9e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ed12031-45c4-4ad8-a9c2-4ce520dcadbd", "sighting_of_ref": "indicator--665e2ce7-c2a1-4f38-b3b1-0e09e77eccf6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2725cad5-2c93-4918-ad5f-f749428a593a", "sighting_of_ref": "indicator--c35fbdb5-caa9-4b2c-ad2d-f67db782c3e4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0051fee4-08b4-404e-8082-e95262819f05", "sighting_of_ref": "indicator--40f50e16-8fff-44db-b519-57168ecf932b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3640d374-23e4-4b5b-93df-97176f9fd9b9", "sighting_of_ref": "indicator--5fec85d2-c5f8-4912-af8e-787f0bfad98b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d4a188-e78f-4f41-8a05-4068918a34d4", "sighting_of_ref": "indicator--fbc731dd-e9a1-431e-8aab-4dcf9db27244", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434bed11-2378-4d4e-ba68-85694f8f7700", "sighting_of_ref": "indicator--86dbcdc3-d4e3-4cef-8585-2d6e8a32c3be", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fad9658-7c2b-43bf-bfcb-80f1ac84caea", "sighting_of_ref": "indicator--3a32da49-5f64-49ee-9905-cb11ed629725", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0634b9-162a-4eae-ae4d-21fafbe82966", "sighting_of_ref": "indicator--f84e167f-9559-4095-8cf2-e86940fcd4bb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e03a3e-c087-4c18-addb-af3d371fe15b", "sighting_of_ref": "indicator--ff0db58d-063f-4796-99a9-371ec317228e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4062150-2585-4dd1-b270-749a6c8e3e69", "sighting_of_ref": "indicator--22218312-b06d-47a6-8c22-ecc1a07094c0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d2772d-d7ef-4c8c-bf6c-87f9c0452d24", "sighting_of_ref": "indicator--593df271-ded5-43c0-914d-fca7edf6ec38", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b6f6cf-5e7d-4fe7-b540-5dd0920c66da", "sighting_of_ref": "indicator--41509f93-98a0-42d6-9e7c-c7cddc021d12", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac39885-0f4d-4f50-9e86-c55d9cc8023c", "sighting_of_ref": "indicator--fa8e3d75-5b29-4d0a-be92-87ee423a7a82", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec53551-8e3c-4558-b3bf-fd3b11e5353d", "sighting_of_ref": "indicator--239ef06c-c3fd-4fa3-886c-ce2a2d4563e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed0e54e-86f9-4079-9284-80950e8070ef", "sighting_of_ref": "indicator--6332327b-2562-49b8-a9d4-9669470de11f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22b8280-5cb5-4994-9cf0-80547bdc08c2", "sighting_of_ref": "indicator--e399225b-ea26-407f-adef-d26aabaa648e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c16f31d-61d5-48cd-92f7-459697ebdc4a", "sighting_of_ref": "indicator--5fb956f9-e205-4fdf-9fb0-93dd8b3ce5a8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f16b92b-a8ae-40b1-a02b-4023351d6b0d", "sighting_of_ref": "indicator--36681e9d-a4c2-4e87-8cd1-c966ee0dfb8b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48e07167-d56e-4335-8ffc-8f2a1e96d933", "sighting_of_ref": "indicator--a26a8a87-f08f-403f-b551-7a4f6be01fa4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7282612e-359a-4923-929b-c71e38f1f222", "sighting_of_ref": "indicator--b326f2f8-0241-4e3e-9b4b-0ebb28a3d5d2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b4dc5b-aa73-48ce-be7f-865b6d6538a3", "sighting_of_ref": "indicator--b208babf-71c9-4d3d-a7fe-cc0faf31fbc5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d93e8a-e7d2-4b6c-b9af-d83f50b7e032", "sighting_of_ref": "indicator--93d50d2d-8ab1-4de3-ab62-1c766f1f3921", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea2c68b-888e-4c53-992e-c5bbeb8c260c", "sighting_of_ref": "indicator--0c2af0a2-4050-486e-9739-1b63212cca93", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c1a839-8d1a-4882-9550-ff2021fe68f9", "sighting_of_ref": "indicator--4fb467db-75cd-4f9a-bd12-56d7fd9c5e2a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97995365-027e-4626-896f-45c6ac833457", "sighting_of_ref": "indicator--f74c5f8c-4a30-4042-90c5-77923746a7f8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d4f9ac-eb81-45a0-a126-01d5326d66ce", "sighting_of_ref": "indicator--5fb7d2ee-4c97-4508-8c55-cb54f3b7f262", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78695404-9acd-4e82-a37f-d79f466178c2", "sighting_of_ref": "indicator--3c5f58e2-2572-4ab6-9f39-a7e9804663a9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ee6f40-38b9-4c66-9843-e99e0993498f", "sighting_of_ref": "indicator--ac8a587a-ba59-42d5-8217-88d9c434403b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d2143d-be04-4e31-a550-e65b2c11fa64", "sighting_of_ref": "indicator--c417e722-f908-44cd-9c7c-711591ddd9d1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f50b3a-d84d-4afb-845b-e0e7a573c5c7", "sighting_of_ref": "indicator--66851425-3a17-4f00-9c5d-40a6806c86bb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99464d78-97be-4a48-9e18-3de72ce976e9", "sighting_of_ref": "indicator--f233ef6f-49c9-4ba5-932b-5197c9b9400f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7fca1e-26cd-4785-8df4-edb15dfdbf6f", "sighting_of_ref": "indicator--9d269a5f-1ca7-4d61-9ed1-011dd5f016b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63c52e3-ef69-497e-af2a-61f3b16dbc74", "sighting_of_ref": "indicator--f54bc1da-3312-4a26-a635-717ebd7a0604", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340023d3-b55d-48ba-819f-4a2b37c54c7e", "sighting_of_ref": "indicator--4bbcb4a4-fcda-4645-a18d-821f0f13b10b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b8fcc2-1cad-40f2-985d-7b37701e07de", "sighting_of_ref": "indicator--f04242e1-7785-4730-95b6-3423b99a5501", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822bcffc-9370-469a-9f16-5f5068f5b741", "sighting_of_ref": "indicator--a4aa1790-10b9-45ce-b86f-cdfdf2f9a5a1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f12bb7e7-c682-47d5-969a-27de3aa7b163", "sighting_of_ref": "indicator--7116ec11-948e-4036-bfb9-19b96bd98917", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e30b858-21b6-45cf-9fe9-9fe292b57af2", "sighting_of_ref": "indicator--78383ec5-51c4-4a40-81e2-536421a7412d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35f50323-3c9d-4583-bd6c-d28db669b994", "sighting_of_ref": "indicator--c1ec6c60-d528-4449-b14a-a1929c3e0fa6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c2913a-c7f1-4edb-97ca-c9a772f97f8b", "sighting_of_ref": "indicator--29e264d7-1750-4c81-88b5-0fa0d3933811", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e545f1-9221-4a39-9527-49b1a5af2a73", "sighting_of_ref": "indicator--e4d90583-d859-4d9e-908e-cbdfda124249", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19519073-ef20-457c-a6f4-87756691182c", "sighting_of_ref": "indicator--52c231de-5640-4661-884a-558e7baca876", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--392e017b-a9c7-4fc7-b72e-a54cce07f820", "sighting_of_ref": "indicator--96b3e165-af1c-4d4a-bf1f-5b7a979a16d1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5794e3f-f069-4fc5-b99a-55f2cb6f51b7", "sighting_of_ref": "indicator--705ddc71-34b2-447e-a563-16c066970de8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345a5245-6255-474a-bfb6-596949219a12", "sighting_of_ref": "indicator--9bb74a20-f89a-47bc-adfb-044624f88fb0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e26c5e-30bd-4c66-b2e8-ec0e2c7b35e0", "sighting_of_ref": "indicator--f6ae6b14-ffee-4525-9634-b478be562ce8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa05f89-9437-4b4c-a80e-e90cfb7d8986", "sighting_of_ref": "indicator--29e78443-dd7d-4bc2-9e37-4332cb665ad1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605f89c4-7542-488e-bd45-87cded044dad", "sighting_of_ref": "indicator--7c51adb5-ab3c-4abc-80c7-fc0b74f456b3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c22a69-a70c-424a-957b-43ef87612824", "sighting_of_ref": "indicator--b711773d-cd88-4448-82b2-d31fcd9d07c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a943b00b-c3b1-49ab-b10c-e5d050a55801", "sighting_of_ref": "indicator--e10f6d9b-7d00-42e0-9bf0-1c74592d834e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3774684-8642-4dcc-83f2-3e53549ea95e", "sighting_of_ref": "indicator--e803a832-7935-4208-b243-344678e52e00", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4063b35-8fba-4380-a91f-a1d6d8444051", "sighting_of_ref": "indicator--6ee88a91-ac5d-4e94-ab1e-f3ac1dd522ff", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1625400f-ed07-4305-952c-9ef5ad8b2807", "sighting_of_ref": "indicator--4abc486b-2325-4285-a578-ab299be488ab", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c7c0ec-1330-4508-80ed-c79f673fc76e", "sighting_of_ref": "indicator--28bf3a29-5004-4355-a2a2-10c19e15952b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22504e3-cb43-45b9-865f-1a38b751f67b", "sighting_of_ref": "indicator--1c5567cc-c2c1-4548-b87a-02505f1960bd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672db57e-56ef-44a2-8d07-ab02ddade807", "sighting_of_ref": "indicator--e47485d1-331b-41aa-8f68-fe0456fa73d5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5050c8-abef-4bc2-9d7a-9b17d1d3a4ba", "sighting_of_ref": "indicator--6f6a56eb-2620-43fd-8a1c-a16a9f640968", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1e6e50-7e53-4bfa-9646-2e839c367b99", "sighting_of_ref": "indicator--b038b809-fc92-4fe3-86f3-b3abaa71dd0c", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7aa797-76aa-4551-9345-88ae962e20c9", "sighting_of_ref": "indicator--c5416378-709a-41b2-a623-057adf5f76e5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--637e51a6-aef0-4647-a615-432020b78924", "sighting_of_ref": "indicator--b64e91ee-8cb9-4c04-a29a-e5f802185ea2", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526227bc-08fc-46d4-88f8-3ec9a0f6fd9b", "sighting_of_ref": "indicator--7e1b48af-6af3-4a52-8a02-5e3663664a4e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a1e9f6-932f-4847-a467-53c49998fd55", "sighting_of_ref": "indicator--9db7143c-421d-4ae0-9742-6916f118a1f0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce649b4c-20a7-44c0-8336-704a99e5e996", "sighting_of_ref": "indicator--9144d502-c678-445e-9838-4a7de7332ace", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a34942-9e6f-47fc-bf5f-9cdbc6465acc", "sighting_of_ref": "indicator--4237d58e-d1ff-4995-bb36-7dd8f6a86967", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4580aba6-37aa-4427-b064-bd4754e191a7", "sighting_of_ref": "indicator--427432f6-f0e1-40a7-9bb2-abe44b6136c8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d40630a-5928-46c2-bb9a-37547207f571", "sighting_of_ref": "indicator--043cae32-ae49-44cf-8737-7c62fc8a0cd8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99b0eec-3b90-4fe1-842e-3c0788bc21cd", "sighting_of_ref": "indicator--b6dcf390-2a84-48f6-85d5-d7dd2f7144fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e81aa86-cd42-4c10-bb7f-1006077367b9", "sighting_of_ref": "indicator--c566d64b-4e7f-4bef-b1a8-248ae14de081", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1761e3b9-201e-413f-a910-4747d9c2f1fe", "sighting_of_ref": "indicator--330759af-d008-41c1-b055-cae29b608008", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18bbb1a1-5671-4fb8-9c02-af4b65c2e754", "sighting_of_ref": "indicator--125d1989-f9d0-4721-8f76-21b0fb8c6633", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56312c90-4059-4b0f-abdb-64f6a4e7cdf8", "sighting_of_ref": "indicator--55f08218-a89f-462a-9e8f-5bc2d4c443e6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1257fdca-e348-4a29-bf11-d3d74c57f016", "sighting_of_ref": "indicator--c413ea72-5104-481f-b7bf-590de5ef8df7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--defb97f7-0371-4381-9db6-35d6cb875811", "sighting_of_ref": "indicator--b5b94e71-c495-49e4-a648-5de372f9ca9d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d855ee6c-39cd-4ca9-a666-37a11cc55e06", "sighting_of_ref": "indicator--531070e8-c251-4674-a35a-63d04840a2ea", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47e7aa6-7a07-40fa-b295-d55b79cb4a86", "sighting_of_ref": "indicator--40524cc0-dbb0-46c8-821d-63b3bbd53850", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e00f4c2-c281-4b85-8fae-c29760e603aa", "sighting_of_ref": "indicator--5f86d0be-2d29-4c92-b7a6-6deddf85cd37", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317aa2f4-256a-4153-a462-5fbd47e5d662", "sighting_of_ref": "indicator--21477f7f-a094-46b7-b4d3-0aa8d3904f80", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3beb7ba8-09b4-4c6f-8167-94f4e7a93d2d", "sighting_of_ref": "indicator--b3af5773-46ec-4adc-bb34-95fb07e2662a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263e4ab9-53c0-4df1-91e3-20b745434add", "sighting_of_ref": "indicator--d6c0ffb6-5d0b-44d6-9623-5d5235d95d92", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5123ead-0e15-4bc3-b052-71f27df9580a", "sighting_of_ref": "indicator--630893fa-9c43-4312-9b21-39fd59646316", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37bf35c-f318-4bb6-a842-1597ccf68b97", "sighting_of_ref": "indicator--d8cb9bbb-f7c8-40a9-9de2-484149849703", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73da680d-254a-472f-8249-2f3b934636e0", "sighting_of_ref": "indicator--c6a2b12b-b5d6-45c6-9a2b-b4509f8e4c6d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829cfe4a-d7b2-46e4-a07b-c56eb9160e04", "sighting_of_ref": "indicator--a0660e77-93e1-47d3-8c99-05a408ac3cde", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f68a79-3b6b-4f35-851d-ead34276bf59", "sighting_of_ref": "indicator--987fcd9f-e05a-41d1-b77d-c44916f4a62b", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c165f1-7051-4574-86fb-a325a140cf39", "sighting_of_ref": "indicator--8e70dd14-ac5c-4718-8f00-16a388298ba4", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e42e059-0e49-4c15-810a-99304637e0e9", "sighting_of_ref": "indicator--ea9b149b-52f2-4c8a-ab80-b351548f5695", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f31b824-6420-4c65-9ca0-040909b4fad4", "sighting_of_ref": "indicator--6f370349-d887-458e-8503-c97ce5fa878d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e30fdca-1a4c-4ebd-b8d1-1bfd773c9cfd", "sighting_of_ref": "indicator--d600970d-1569-43de-8f97-da47b4d2744e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac7351a-59bf-4ecb-9bd4-f5456a63a5b7", "sighting_of_ref": "indicator--73141a30-9dbd-4d68-b3b7-530131b4710f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f9964a-5e51-45be-8275-bfdc1ab2573e", "sighting_of_ref": "indicator--76515402-d676-4390-8f20-b7e453ea8f82", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5977eb7b-a844-4e93-b145-5752b401808f", "sighting_of_ref": "indicator--56a91d39-8524-429c-aac8-f2959860c8bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0600788b-88e0-45b2-9b4d-681c928ab408", "sighting_of_ref": "indicator--c3137624-3963-48f0-b496-39563e150965", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc287539-4274-4d95-b4dd-3f36b13445a7", "sighting_of_ref": "indicator--f535feef-717a-41db-9761-39f27db767bc", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eefc1a6-730c-4e3f-a32b-768a1df1b268", "sighting_of_ref": "indicator--983d159d-56ac-4e7a-8f96-be7f1314e56f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b9c008-f85f-4bdf-ae2b-2d8b0bbef618", "sighting_of_ref": "indicator--407a4272-d96a-433b-b183-1869e0a353bf", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492ace89-bd76-485d-90ab-a374e9776783", "sighting_of_ref": "indicator--ab4ab68c-da27-499d-87e9-8b4b975ef7d1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a038b8af-5c7c-4992-be52-100cefd0ab32", "sighting_of_ref": "indicator--bf3fba77-13d5-444b-8cd0-048afc48a106", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8ab05e-a293-4508-ab2f-399f926b0fa6", "sighting_of_ref": "indicator--9253eb12-6917-465b-9fea-c5d8884536e0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cd1617-1402-4a0a-86bb-05f6bb364d27", "sighting_of_ref": "indicator--227e73fd-23fa-400c-99c5-f1fd33e34a42", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48c768a-9d50-4d7c-9460-b47da4183b03", "sighting_of_ref": "indicator--9349e6b9-f2fe-43cb-98d5-1d7a16ec7004", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3a912c-876f-481b-9cb7-93fed9807cf4", "sighting_of_ref": "indicator--afee4be6-b7ad-4456-b956-d575a4b302e1", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145167ee-a8af-4b37-a3d3-9bdc353d8279", "sighting_of_ref": "indicator--7bf8f9df-48f6-484b-baa9-aa0a1e0aa9bb", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fbe3d57-f12e-4d12-85a2-21a0c08f1f20", "sighting_of_ref": "indicator--1ef39a1b-9dbb-4e3c-be5d-eccce0c9d784", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1724df5-995f-4e1c-9a7d-7d9070894eec", "sighting_of_ref": "indicator--04279856-949d-42ea-b69f-b065826f8398", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1594c319-2ff9-4d51-a67a-9e2186e7ec01", "sighting_of_ref": "indicator--2523a920-817f-4e6a-98b8-06f37cb52856", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6458cd6e-327a-4e09-bd10-6c54608a6e31", "sighting_of_ref": "indicator--d6a8c1a1-84e6-489f-9603-8d92d82c66ac", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0556612a-d04c-49cd-81e2-51602ff9d263", "sighting_of_ref": "indicator--de4c5e59-0b59-40f7-98aa-6c4cc49c0560", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117dbbc7-f387-4f9e-9495-94c9725f0660", "sighting_of_ref": "indicator--3002b121-9946-4b96-a584-04e428cbab85", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9be315-c261-4065-96b4-8d18cebed309", "sighting_of_ref": "indicator--283921ff-7e76-4c69-a8e1-ab6f0589229f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44c1d11-017b-49ee-96cf-6f224e77fe05", "sighting_of_ref": "indicator--d6dbc76c-6d8f-4258-b378-cc18c865b641", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7b8c2c-d8c7-4e78-b0b8-1c29f6db2ede", "sighting_of_ref": "indicator--824f5d24-fe8e-4b1c-b0bd-a735e22c3bc6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72466087-a3e6-41c1-9ea1-25863cae308b", "sighting_of_ref": "indicator--db861fa6-a7d7-4e28-8bee-a4bc4102a0d7", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7d1ffd-8b53-469c-aa6a-04d7f61caea4", "sighting_of_ref": "indicator--93ce0c78-e313-4f88-88da-f7dfb7bf31ca", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016b7272-53f7-400c-92f9-68a8ee2a54ff", "sighting_of_ref": "indicator--c92899c7-3a31-4fb3-af3f-03179f6790c3", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d84bbc8-17c9-4249-9daa-a1ca1550c2af", "sighting_of_ref": "indicator--c1d67968-14a9-4b34-a0ca-f09c6f365333", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9fc6e8-f146-4710-a0dd-118d63a4d333", "sighting_of_ref": "indicator--8cf8fe16-d865-4651-bf75-6c3ca9416b27", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14854c2-8f62-437c-9ef0-7e986b48114d", "sighting_of_ref": "indicator--1304413c-d275-4c7e-ac31-7ef701c0aca0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21efbcf9-97c8-443d-b6af-a248dde996ee", "sighting_of_ref": "indicator--8481f543-d342-4d4c-9091-8a67e0a10e69", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df86b5a-26f2-48b5-b014-c6f6c453327d", "sighting_of_ref": "indicator--7374df2f-6d23-4d15-9f20-5f6e6cfcdb7a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55fed3d-83ce-44af-b431-06e7749d03f0", "sighting_of_ref": "indicator--19d667d0-abcc-4622-bd68-d179a33dd0d0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2841ee79-80de-4ea2-a626-46bfa08852aa", "sighting_of_ref": "indicator--37d70599-1648-4c0e-94c6-e4f11bdd5ffb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c1ef1f-b7bc-47bc-8b5e-045e6e8cefd4", "sighting_of_ref": "indicator--ca02bf60-ac98-4f76-b3ec-91f946fa4be0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6913d7-921a-48e5-96a0-c1562a868041", "sighting_of_ref": "indicator--a78c6573-595c-4272-bfc1-3d382c2c78d8", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb1f8be-fe55-4a80-bd22-8ec0f81d902b", "sighting_of_ref": "indicator--63be3ccc-ddc1-47fc-9930-17a3f671085e", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270238d3-3614-401d-9104-e1c09ea4a91f", "sighting_of_ref": "indicator--8291e54a-f7a0-43d7-9771-6f1c6b9cc7c6", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bf4f53d-aa19-4414-882a-5f1534a023e2", "sighting_of_ref": "indicator--1fcb764f-131e-40bb-a93e-8bb31a2c6e3d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb921f3-2be1-4c29-8681-1356ebb71faa", "sighting_of_ref": "indicator--a5126a1c-b4e4-4381-af8e-c1d9db83e407", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f19b0e5-16a5-4a5e-8ef7-b016e2c59b7e", "sighting_of_ref": "indicator--55b9c291-64a9-4759-8253-93890c239d51", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957479da-6b2d-416d-ab08-f6dad6596b45", "sighting_of_ref": "indicator--53613fdb-a78f-4922-bc0d-4e1617ffa57c", "where_sighted_refs": ["location--997805ed-5b3d-45d5-8657-fc968cbf9699"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff189560-fc2e-4102-9eec-8a9b6d445b0a", "sighting_of_ref": "indicator--bbae649c-0a6b-4f94-9507-4d859a36e011", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b22cc1-ae5a-445b-b10e-ab09d9a7c6bf", "sighting_of_ref": "indicator--3de14e92-69d3-4196-9b6f-4a699b2ad3fd", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d556f0c8-33a1-4a9a-9e64-73f4d7a40d39", "sighting_of_ref": "indicator--6784bf2a-69be-46f3-a9ef-142c6ec9dce5", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c622663f-e6dd-42c8-b66e-eadea79f7c6e", "sighting_of_ref": "indicator--62a7348d-9f90-4b09-9aa0-0f089084732d", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db162155-145c-421b-b13f-32b3e66f5e1d", "sighting_of_ref": "indicator--5b1875b5-34ac-4aa2-8149-4c8d975f018a", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb60d3b1-7e85-4b4e-8a3c-efcad2eadb8f", "sighting_of_ref": "indicator--5d5ea6f8-a497-4640-8a70-e15c12e97199", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2311fda6-38b7-450b-83ac-86a7ca9ef021", "sighting_of_ref": "indicator--518e7c37-53d4-4475-9edf-81408985fbc0", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0b3e4c-d80a-4202-a9aa-8f1354c9c513", "sighting_of_ref": "indicator--cb16f90b-e46d-46d5-9abf-c8bbed20df44", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548d9972-eb16-4ef6-8f3b-88198ed3f59f", "sighting_of_ref": "indicator--c5c91b3a-eaf7-4503-b975-eee09ae1b4a7", "where_sighted_refs": ["location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e195e4b4-7965-401d-8c84-0b85a3db10ed", "sighting_of_ref": "indicator--3c2c56d0-591a-4c8a-ad97-71788151733f", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327b6a61-e2b0-42e1-9680-a703d493c6c1", "sighting_of_ref": "indicator--7ac74a6b-3a1a-41b4-a0bc-a50d5cf30c9a", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b125e37-ee7b-4947-86dc-4755fe9d6a34", "sighting_of_ref": "indicator--d808e745-d7ea-4b4b-84ec-b67c668822b9", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c15b97-eae9-426f-bf8c-671814612070", "sighting_of_ref": "indicator--80609aa8-86dc-46ff-b093-607c823e7778", "where_sighted_refs": ["location--f575e0a3-611a-4526-9a98-fe1d93231818"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c193b54-3192-4037-8ddf-40a3cea5d762", "sighting_of_ref": "indicator--7294c77e-4e3f-4840-8da9-5ddbc7e9ef5d", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c619a0dc-9a5a-440f-ab2f-be605b0cc67a", "sighting_of_ref": "indicator--b9ff29cb-a01d-4b83-a468-a751522074ee", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43756140-c574-4b93-b603-371e3fc8408b", "sighting_of_ref": "indicator--6d854d27-868d-4214-b566-dc7db4e91211", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e03706-2f75-4202-bdbf-4fe542ee3865", "sighting_of_ref": "indicator--4e61daf4-fbce-4d3d-bf6b-517abb77be05", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f16ee1-0c0b-4aa6-be81-dcaaa71fda51", "sighting_of_ref": "indicator--174a359c-e79e-4f19-9dd9-46e7de755308", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055d92ee-dccd-4903-9a20-66617925c789", "sighting_of_ref": "indicator--27318a13-895e-4b88-8cee-d2ddac8a8216", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf07a993-a563-49a3-86f8-a9cc01944500", "sighting_of_ref": "indicator--9ba19091-0c71-48fb-80ed-cec4e700d8e9", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f3488e-585a-4e10-a1bb-a4fa352a2fdb", "sighting_of_ref": "indicator--75acd96f-0573-47ae-93b4-69118a3e6937", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ba05dc-d962-4455-9b20-284726d25697", "sighting_of_ref": "indicator--821f906d-5511-43b6-aa51-6678bc087ccd", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b822d3-a2aa-45b4-ba11-9fcf1deadeba", "sighting_of_ref": "indicator--07e18904-e533-4188-b62f-e1ae122b8aba", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646612c4-e7cf-43b9-bad5-59c90f7a44b0", "sighting_of_ref": "indicator--dcf256f6-1f4d-406f-9fe3-a704229588c0", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d08f04-3424-4070-9ee6-92798c8ff5aa", "sighting_of_ref": "indicator--b034363f-01f1-424b-93a1-ab210956956d", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339950e8-6a1a-42d8-8097-028807b414a9", "sighting_of_ref": "indicator--f8fbe1fc-5e28-477a-8733-8d8c5f010dc0", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899fa2eb-fab1-4044-a7c6-6a10f9a32cbc", "sighting_of_ref": "indicator--ff791626-5a83-497d-8538-3f67a87b3687", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09ba0f10-8b45-4d5b-ab3f-26c47f7e47e5", "sighting_of_ref": "indicator--b24f06b6-842b-483f-8c3a-cca6f03790f5", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d81f59-4085-49d4-9ad5-3d090af68f9a", "sighting_of_ref": "indicator--1b99b4c3-158c-4724-8590-c672edd69525", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ed177a-69f5-4a93-8808-b0ce928fd6b2", "sighting_of_ref": "indicator--c4b6384e-408f-4de2-bb8c-9f4307daf627", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d7a6cc-4a91-4b9d-be86-32812dfb548a", "sighting_of_ref": "indicator--ff8c9bab-5a9d-4eec-bb93-6ff9a0d78425", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e23def-cb68-42df-a042-60cad2459647", "sighting_of_ref": "indicator--1ac5990e-4d88-4185-b168-2fab56591c5c", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72db3649-8d54-42e3-81ad-0154a136da9e", "sighting_of_ref": "indicator--e211e173-c1cf-4642-9850-b87b2f78cb4e", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35038946-78ed-424d-b064-97d2aa0cdf44", "sighting_of_ref": "indicator--52e4a60f-6f44-4504-812a-521ad3dd77fa", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab34b89-15e8-4f84-b4fd-2eee08edc183", "sighting_of_ref": "indicator--309c90cc-48ba-4d14-865a-3d60f976b870", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3265735-8283-4cf3-a09a-5aa832c34ee6", "sighting_of_ref": "indicator--620787a7-995f-4770-bd95-2797a7c587ef", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e884188e-6d04-474d-921b-a139380313d6", "sighting_of_ref": "indicator--b21d4183-4cd5-428e-94a6-0fcf28574702", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76edf5b0-199e-4c0c-8f17-47e383632527", "sighting_of_ref": "indicator--5408423d-cf5c-4462-9722-8f99bf16b442", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04aaa43e-8e35-4b63-b4f9-9f69d9475ce5", "sighting_of_ref": "indicator--9a9e827d-606e-4294-b551-13eda2ac49dc", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb19ba1-f207-40ee-b6c2-72f9ac30e17b", "sighting_of_ref": "indicator--85cf9c36-1d8d-4341-adb9-0b8374136c2e", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d366ff8-e498-4208-9b77-6c6f38aa206f", "sighting_of_ref": "indicator--333b0d01-693a-4cb6-8a8d-8b45ac15f8e8", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c99d9a7-795c-4374-8d93-2ff2bdce7848", "sighting_of_ref": "indicator--be60c5e5-6f6b-4d43-9796-f303f5f64a24", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea810695-3782-4c63-a857-a51719f7523a", "sighting_of_ref": "indicator--22f9a911-3b9d-49a8-9efe-9195cc34cd2b", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b499f87e-548e-4bc0-8463-4940b2c13c49", "sighting_of_ref": "indicator--78e055d8-0c10-4813-835f-3040e07d8672", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a96f33c5-01fd-4f74-9f95-4c4ab01d6594", "sighting_of_ref": "indicator--d33baf58-0679-42dd-bdbe-232ef342cc28", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d25099-8a1d-4ea1-a11e-aae088b6ca1e", "sighting_of_ref": "indicator--61699682-7c51-4681-b1c7-75703b3698b4", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a11007-9ce2-489e-bd32-908dffec4cb0", "sighting_of_ref": "indicator--207ea2c6-5c12-4dbb-8e7b-badc6c30b67f", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d24b793-acb4-4f43-b90b-37838566bcce", "sighting_of_ref": "indicator--3f77b377-2613-465d-aa77-4551f6acadc8", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77bd5b3a-a13f-415a-8389-0e371985aa9e", "sighting_of_ref": "indicator--6234fbd3-1225-42be-bf9c-d0e2d72705ab", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cd8802-7dff-4ea3-af27-b7b0ab2f3ac7", "sighting_of_ref": "indicator--d9205a2e-62b7-4d1e-928c-95649f0e8980", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82717fcd-245d-4fa6-93ed-4628c541650f", "sighting_of_ref": "indicator--d84f0cf1-5de9-4306-9160-5660e420515d", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ecca36-484f-4e4e-8fe3-97932cd0c68c", "sighting_of_ref": "indicator--b93d9111-deea-453e-b8dd-3eba67703f85", "where_sighted_refs": ["location--515439dd-4390-44cf-bb3e-29405b2d70bc"], "first_seen": "2026-05-29T00:00:00.000Z", "last_seen": "2026-05-29T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--50372dec-885a-4275-a451-0870db3ba53e", "name": "Threat Report for 2026-05-29", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-05-30T11:00:02.024Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--515439dd-4390-44cf-bb3e-29405b2d70bc", "location--990f7bae-01c4-4dbd-83f7-a9ef6dbdee1b", "location--f575e0a3-611a-4526-9a98-fe1d93231818", "location--997805ed-5b3d-45d5-8657-fc968cbf9699", "infrastructure--d00e252b-9290-4b5f-b4dc-3f3a0e3280da", "infrastructure--51e2a635-89ca-4c6d-b36b-6c2f7458b093", "relationship--bd27069a-027a-4d71-b90b-1856a8bae8f8", "infrastructure--93b1a959-2b3e-48f3-bb50-62de543106b1", "relationship--fe3afcb7-e974-4cfa-b273-89e8419b323c", "infrastructure--08592dcb-c533-40fd-875a-85e3dced9abb", "infrastructure--09812aa8-7061-436b-a9be-86d76c521ada", "relationship--ca81f28d-3190-48f5-8884-99f4beb0a326", "infrastructure--b1597aef-fdc9-4d33-bf5d-36ca3c5d31ed", "relationship--b30c9e3f-e8aa-43cf-b493-f3c90cf85a46", "vulnerability--d3572596-05e0-4bbe-a5c2-7844e00d9a39", "vulnerability--e8b09de5-07fd-41b5-a7a0-781491653bdb", "vulnerability--60b8a746-e0f0-4c7b-90b5-462d6274f3a3", "vulnerability--43478ffa-ebdf-4d2b-8127-38e7432e863f", "indicator--5d7d0ca0-71e0-49ba-9d27-5b34dada1a37", "indicator--693cc838-26e8-463b-af45-411ef79686bb", "indicator--33d6f73b-f2f9-40e7-8e2c-15c45cab95b8", "indicator--a8ea82bc-0de7-48b7-b6f7-728e9da78f8a", "indicator--a5bb1142-ed07-4e66-b87a-bee9c35a06ea", "indicator--e14cd6e0-1f1b-4204-9e84-7d5d60ddb269", "indicator--05f8b09f-1fdf-478f-b7ef-ef06b7ca6d19", "indicator--fdc3a98f-71df-400c-946c-918bc12c695b", "indicator--ca71917d-c190-4306-b567-bb37a42bd55c", "indicator--9732be67-d0c3-49b4-9b64-647172d5588a", "indicator--5efd38bf-b7e2-4b03-8c2a-859f3e659582", "indicator--4b7030b7-399a-42ef-ba8d-ba4ca00b32b9", "indicator--46c3cc9a-1e86-448a-bf55-b7ac0287ac81", "indicator--4b02ce46-160c-47e1-ace9-0c681099a0b0", "indicator--1c3e6aeb-7fe3-4f1c-ab19-fc82cf3b2bfd", "indicator--a9638485-b5bb-4105-8b5d-04123d65cf6c", "indicator--291dab88-4004-4028-b19c-5f29d846ab90", "indicator--7f79d070-da56-46f1-b0b4-6000c97a1047", "indicator--bd8a44e2-7333-442f-b481-642cda9da983", "indicator--1e4a8302-9f46-432a-a978-e63c4b6d0d7d", "indicator--1e131b0f-eb79-4da6-91ee-ec4e950ff200", "indicator--52f60326-7009-4f2a-ba1c-ac0ad17a791b", "indicator--3031ee3c-5bf8-49e0-87f2-090a1def00ae", "indicator--58cf25bb-bb49-41a9-b4df-b21652416bcf", "indicator--b56428b8-4101-4a4a-a059-0abab4b6346e", "indicator--b1efa1a0-628f-4fad-aef2-835c2fbca333", "indicator--cb10fd53-0ad6-4b3a-92bc-2e608099b794", "indicator--d4f70d30-189e-4b56-806d-8a783e52ba48", "indicator--07890938-9c5b-4d61-bba5-338c37c1bae1", "indicator--e1b4f824-1d75-42a2-9183-f11713c02aa8", "indicator--9956a581-f1a5-4bfa-9871-324eb588a704", "indicator--2f7bd323-e847-4c46-b7fa-22e25c224fe8", "indicator--d47a97e7-c50e-4cf8-afa5-512518951e8c", "indicator--37ff0555-1b5c-4d8c-9f4c-c1873bb6307f", "indicator--a516662d-e649-4bd4-b3d6-831407b32727", "indicator--40d0d309-a20e-40e7-8e8d-61a7fe189c17", "indicator--e918b40c-9895-4394-aa16-22eddf82198b", "indicator--a00fcedc-363e-464f-b021-805025000586", "indicator--5a668775-745c-4f0b-a9a9-37476a692a43", "indicator--5cafe550-1e1d-4d79-897e-88ec7badb99a", "indicator--79b81c0e-601c-440e-87f3-bd7e2dcb9395", "indicator--7bbcecb8-efb0-4d39-b9c3-16e3fc98c8c4", "indicator--a9bcf91d-f141-47ee-8472-b19b77d0d734", "indicator--e45971cc-f1f9-4b4c-84ff-ff342b6a94fd", "indicator--6364d92e-9648-4765-b6ac-93f8e7886cdd", "indicator--1e8da6a4-357e-483d-b8af-93efc8271bb2", "indicator--0ec113ab-c3e6-45d5-9f8d-f5f3d1f077de", "indicator--348edccf-cd91-4a15-91ed-727f73934e1a", "indicator--0747ae79-a3fc-4e13-8a12-5c6b5cac873c", "indicator--6d55356a-c7dd-46d6-b17c-8c2fa2b9e8d7", "indicator--c32a7b5b-d17f-4ed1-bf6e-6b89d8758d25", "indicator--27678fbd-c767-45ea-b476-12da18c18985", "indicator--6fb818b8-8b8d-4caf-af06-404e8c66736c", "indicator--7eaa87a7-1f4c-4e79-9ab8-397be844acc5", "indicator--b38c6e3a-cfa9-466f-a2af-33964d747143", "indicator--d926c4be-9045-44f9-acf9-59e0a21aed1e", "indicator--b86e77b0-8e50-4573-b915-3a546500bc3d", "indicator--8001c904-650b-4715-9261-d6340e66fce3", "indicator--520e8c22-1ecc-47b0-9332-ab5977532ea4", "indicator--4dea08ea-2ab2-4164-9496-05a27f2e2c4a", "indicator--9228558a-4352-4606-ad58-500eb273b53b", "indicator--c3906edf-e207-477d-b53f-b4d68846fbef", "indicator--65d097f7-d31e-4809-a3bc-3b1f2c226d26", "indicator--5d24524f-3958-4c8c-98ef-b93d5d7f0c82", "indicator--a8954812-1e8b-4475-9663-6523604aecd3", "indicator--feee91b4-e48b-4a8a-8726-f55987ea104b", "indicator--7e0ec60c-e5fc-4fce-b1b7-f5d39f1a3142", "indicator--531b777c-1dc0-46e7-9525-c0c04a52ce63", "indicator--3ac7b67a-9244-4d37-aaf4-8ad08573a560", "indicator--6fb32fe2-fa8b-464a-9895-d0fdb4b72874", "indicator--8ae51bc4-e2cd-45ce-8b74-30d70d6644ba", "indicator--9c30a2c0-2023-4e6d-b364-931b30798123", "indicator--605948a7-9199-4409-a511-b8c22c20e1cf", "indicator--7dc47891-7469-4d20-bee8-c1458b099754", "indicator--0b0b7948-7f9f-4c5b-8cb8-538d771ea012", "indicator--05716554-f3bc-41b7-a9ec-21ebea8b5074", "indicator--61bda572-ba26-458e-b6c5-3a0a3441780c", "indicator--ab0f2b05-0b94-48e5-b6a3-79ffe35b0d89", "indicator--4eea75da-8df8-4223-bd44-f6d109bded30", "indicator--f04eea29-9272-4a57-afcf-da3bed9266bc", "indicator--6ee00ad3-0011-4948-bc90-a3b9da12245f", "indicator--21d200aa-cb98-46fb-bb1b-24a03f7a1d2f", "indicator--1033a7f4-ca7a-490e-acb1-36a22f234711", "indicator--6f7edaba-7126-4c21-bdc8-1b87a91d52a4", "indicator--8d7171d5-0ff9-4cb6-bd24-62eccf483c1f", "indicator--b41cbc18-2109-4406-a824-be9e2f408848", "indicator--2448f095-b08f-4676-a216-3360e5ab00b9", "indicator--2f011246-88ea-4d3e-a2bb-86c583b0096a", "indicator--efd41c6c-47b2-4ce4-a1da-86c03fa31c12", "indicator--b59f0fb9-52b9-4a24-adb3-68950de636b9", "indicator--faada3db-e562-4c89-8e5a-8bb30ecae334", "indicator--b3db32e3-7be0-48de-93c7-f876fa0e3934", "indicator--2e01e1bc-e84a-4005-828d-4336533bfe62", "indicator--91e74091-5a70-48c6-8f1f-701b6c5b3768", "indicator--c6aa2567-d1bd-426b-a7a0-466ab9da9bd2", "indicator--e881090b-3ac9-491e-ad8f-d86cbf39aa22", "indicator--bdc21a9e-ee40-4aa4-ae6b-2e063f321cb1", "indicator--4b40c014-d711-4367-bcf9-4c443214ec3a", "indicator--348d454c-28cb-4b17-8c67-71944641fd8e", "indicator--64074730-23aa-4c3c-a3bc-3be36eedcca3", "indicator--994a3056-483f-4f94-8bf9-5a13e52d5fa9", "indicator--ad62c871-39a1-4b23-8017-20dc98f7a707", "indicator--69e7ffc9-f255-4fb7-9a58-984d1228fcbc", "indicator--c8caf52e-858a-4549-8b09-e502f064eaab", "indicator--b28786f5-01b8-4e8a-9bc8-2f6e7c9f7c9a", "indicator--d49ef5ec-4d79-41ef-b665-1c3ee1658930", "indicator--3d610f0b-b39a-4fff-a6e6-2ce664c97139", "indicator--f312c3f7-0d77-4be4-9a89-59e3998c2b22", "indicator--9f6447d3-87c8-44af-9628-35a088ee583a", "indicator--f770aeeb-d09c-4654-8224-9cbf78850bdc", "indicator--639c6618-4456-4978-84b9-0b860d2fbd03", "indicator--63f38558-6a6a-4192-b84e-19f3f45e0694", "indicator--9feb1bc7-d7bc-460d-9c84-e1cb2049a375", "indicator--0610ad1b-b784-450f-a6b6-fe06862bd5b7", "indicator--43beab9f-9cb9-4d25-b606-e2ff8d2e537a", "indicator--6296901f-fb76-49fe-8dde-25bc66c97ae5", "indicator--4c3f5a55-80eb-45af-8900-6f8a37233cc0", "indicator--73234ea5-6286-45a4-811b-7d693d794321", "indicator--489d3973-50b5-4029-99e7-a74658e2c5fb", "indicator--f78591a6-d305-4783-980d-3c3b3298850a", "indicator--fd43b280-7314-4b42-9dd3-d21dcd7933b7", "indicator--2ab092f0-eee2-4693-be63-642666fd6611", "indicator--c76f9b3e-5e19-4984-b8e9-42db888d72c1", "indicator--a63f2f20-3410-4a70-82b3-64bde21348ab", "indicator--9dbd592a-8faf-4cd4-b6d7-b02302d4d7d8", "indicator--8eb3babc-e310-4011-8f2c-d1aa35c20c00", "indicator--c7f8f067-9542-4823-9112-1344aefc2821", "indicator--e2574a8b-cd73-464b-bbb7-580febbbecd0", "indicator--bf4db500-6d1e-4ea0-a8f3-f2b2049042f2", "indicator--ff7c8065-25da-4d45-8d5e-b46722324835", "indicator--72a38c02-d156-4b4e-8f83-faa3b58dbe9c", "indicator--6aa71c84-c1fa-4978-b2db-133c6a57b370", "indicator--a99f7778-3a9e-402a-8046-da402a8b20e5", "indicator--ae61571c-82c7-4d68-8aac-2f83e7ffa9d3", "indicator--4e4b362c-bb4c-47d4-943f-ae3b4e0878ad", "indicator--9175f334-bbcc-485d-9a68-931f3468cafe", "indicator--99aef7ea-1a36-4e06-b965-b644582eccd2", "indicator--b6521f1f-8b72-4f1e-a1c4-2613eb32eb61", "indicator--3c01826a-73b7-41a4-a839-6728fbc276ee", "indicator--533afb34-6591-4224-b726-21e650519a1e", "indicator--d9d15b7b-b25b-4a1e-ad76-3bcef9900250", "indicator--c0245507-223a-44e9-b6a5-3db8a2b7cd22", "indicator--fdaeb0ef-4a95-4ac9-9dd0-93903e5ddd5d", "indicator--82081489-18a8-4957-bf8a-06ea59fdf897", "indicator--68bf770f-e328-410e-a2d1-0dc27ca568d7", "indicator--86fbd5ce-b7b9-4062-bbe6-910c4e8a300d", "indicator--4af9bd24-08d1-4e30-a80f-a79acb664ab7", "indicator--57c11a37-b135-4a63-aa1d-a5f7f478e668", "indicator--faae2f3f-3511-428a-9595-b296e9faf310", "indicator--ffc313af-4b08-4df0-94b6-9f45afc51a2c", "indicator--7fb842fc-dd3d-4d07-ba8b-9492faf83581", "indicator--76d0e93c-858b-45eb-9a86-e070fcd2a58e", "indicator--6fa3ff8f-f6cb-4b32-bada-8b9a833c137f", "indicator--f9532d4b-c0e9-4990-891d-a396b0637bda", "indicator--e3648673-cee9-4944-b032-78647d799e5f", "indicator--a98a2904-20fd-4a03-8813-ed18e397b724", "indicator--1316c7c8-e52b-4a7b-9ab5-b310d7223da5", "indicator--5a9c87fa-6d4f-4f0a-b7e4-9d671c8c1e0a", "indicator--b0bb9c8c-8e99-4e1d-8021-117758141ed7", "indicator--e1bf2ad9-24ee-4293-9a99-bb1ecfd93cab", "indicator--9c582632-2bbe-41ea-beff-a1064ab41517", "indicator--ff610c8b-12fb-4e95-8447-a055a87e5e75", "indicator--39345707-5c97-4c46-87ce-b4ca8b180b2f", "indicator--67bdde2e-3f99-4b14-886a-f72afe2cc57f", "indicator--30e4c6bf-3dce-496c-858f-63e1a7f2705e", "indicator--e7f276a7-1d87-4e40-8a5f-0761651d8e94", "indicator--2e070321-2e0a-48a7-aab1-a81020488bf4", "indicator--05640dcc-a350-479d-b007-0a8d072759e5", "indicator--6ef6ce9e-a2d5-45a1-b65a-85655c181bfc", "indicator--0b4cc094-248b-4a6f-9525-19e187f7f3de", "indicator--40967fda-c9e3-4b9e-b9b9-d6f38fc70fc3", "indicator--a51b24cb-b02d-4cd6-97ba-2c4b7b791986", "indicator--7e78beca-cb3c-4247-b2f2-81d611b9a8ac", "indicator--584a0043-1d47-4954-bf36-909f793b93cc", "indicator--9202462e-2886-4dfb-a357-69acdaf83561", "indicator--10b887f1-9e0c-4ade-bf2d-f960ac36f2aa", "indicator--ca7742c9-4b31-4b04-9ccb-c00724b62add", "indicator--0731554a-8000-4f6e-8256-9c6d19138592", "indicator--6ea813be-bff2-42e3-9d12-6aecbbbd1763", "indicator--ed6f59b4-cd4a-4d91-a877-2f2034ec3ba3", "indicator--fd6a23bc-b35c-45fd-9634-ab97c8b97832", "indicator--d1bc2f97-e79f-4c2d-beee-da7ec546b9ab", "indicator--d21ffe79-03de-4d38-bff8-82a72c072712", "indicator--cebd6693-b3cf-487a-ac26-86657631d215", "indicator--9dd50f06-0fd7-49c3-923b-3d3f38b79a3d", "indicator--55f63769-3938-40b3-9b24-7d06ffe5a096", "indicator--c0e7668d-fba0-47b5-ab2f-0a9899faba98", "indicator--23e588d9-8166-42ad-b49d-8abaccce4e22", "indicator--d6a226c9-45ba-4eaa-8c62-28c88827c6c3", "indicator--fe1b5d3a-a02b-422f-8d3c-831445432b91", "indicator--02fdb7ce-8497-46fa-8680-b04ee6ac60f1", "indicator--94cdddce-4241-4519-8eaa-7c4654a00cf7", "indicator--b3a1f92f-6829-41f8-a640-41a87aa1b754", "indicator--eb838c88-7599-482c-ba5d-2c4233469d13", "indicator--321fc2e5-7934-4cb9-97ca-6e1a1acdd3cb", "indicator--23e33959-3001-463c-ac61-87a26668de18", "indicator--cbaff342-4935-464f-924a-deeb8d269c26", "indicator--0f2e2356-62d5-45fb-b5a5-4425f7787b35", "indicator--13f55bb9-4a4d-4b85-89ff-b144bc8ebdec", "indicator--721c44f9-7c66-462b-a315-51b18988c59d", "indicator--a567ccc4-779e-4d91-8d6d-599dcf7e2aae", "indicator--a0a6ebeb-f1eb-4685-9af1-fb7cd8d720d4", "indicator--3a70e476-aaaa-4161-b1ee-25dbdf9b1d0b", "indicator--30201e62-a64e-4b7d-952c-92d89c17257c", "indicator--6c6cd94c-7a01-4cae-b615-4336238c6b4b", "indicator--7711d7d9-8691-4c54-a4d2-863b320e36a6", "indicator--a708d5b5-77b5-4655-a4f8-8b390887df25", "indicator--032e1f1d-c2a6-49db-8c6d-bd67c49fea27", "indicator--a3800a56-8da0-49d0-baa6-4af7b16d838a", "indicator--e92ba4ef-47dc-4187-ac89-7e5b22314704", "indicator--e1f563fe-b33a-4f3a-abb4-cb894d005824", "indicator--844e1868-1334-4651-b7ae-772334522bc8", "indicator--7e14ad92-6ca5-481e-8487-6dd3f1dfb46b", "indicator--d797bc8d-9085-47b4-8e39-18907e8f2be1", "indicator--e3f086fd-3b70-4d7e-b44f-3ae5fef7b785", "indicator--91aa60c5-b772-40d3-b281-4a992ab57cd1", "indicator--6f041d28-7b64-4b49-8507-a749b51fd630", "indicator--6b86477f-668b-4d9b-938e-1ce9858d37e0", "indicator--1c4635d8-c117-4e52-b437-abfdcd3e1896", "indicator--00e49472-64b2-44cf-b37c-8f633f32555b", "indicator--a03bfec4-dafa-4d77-8767-677918fb1a7e", "indicator--16502c86-6a3e-40e8-b547-27440eb38f58", "indicator--f20f7151-f9a2-479a-97e6-9f786a70d611", "indicator--aae79d9e-363d-460e-95cb-ff69a50c9994", "indicator--890f5fef-09ea-4bd8-a865-7c00853039e8", "indicator--734a0429-176e-4afe-8e0e-45c200eecc53", "indicator--05d1f0c4-34a3-41d2-b3a3-9f2b70e1fe87", "indicator--561fdcb8-5d4c-4648-bc1d-59e9409628be", "indicator--55e2d214-ffda-4d46-a486-c74f83d004dd", "indicator--f4d8893b-9643-4e96-b3f9-d792a7853f45", "indicator--cf7ff473-dd37-4018-81b8-d0ebf19ac387", "indicator--f988c9a9-0852-4213-83a4-6d17af49b639", "indicator--c2dfbc09-daa8-4513-ac99-0705099af184", "indicator--e303266a-32ae-45ea-9445-0ec66cbf27d8", "indicator--413301c1-0786-454a-a78a-e4c855e4a4ba", "indicator--b331edf1-ae2f-4236-90be-c5463ebc3c40", "indicator--c35c4348-e789-4f49-9678-63408614afe9", "indicator--f0a70917-45ba-4ed4-8d92-fb7895239802", "indicator--04e4c99f-7922-4a7f-b8bd-fff7cdcdd29d", "indicator--f906df88-64a1-4c23-b220-7f91e48f7d5a", "indicator--5f8168eb-fd49-4cd9-a108-9aac4c2f207a", "indicator--21ca37c5-3dcf-4c6e-969f-f35215a3bf2b", "indicator--2207a4e8-7a3b-4630-bac1-5544e453f7ed", "indicator--79e14351-3cf0-4331-99ce-522184b8b177", "indicator--aed2f63d-d598-4ade-aa90-45c8f01400fb", "indicator--29abe3b1-f781-486d-a465-e7559ce7be31", "indicator--56580ebf-d3b7-47bf-aed4-1217086b5599", "indicator--4f4c19e8-db00-439d-98f6-8c0aa6df2192", "indicator--0c8df949-d38e-4c14-ba72-69478060ac21", "indicator--25536832-839b-428f-af4f-05efb75dee1f", "indicator--9a433440-8ea2-497e-9976-054a9b9227a3", "indicator--4ffee445-5daf-45c7-8c64-c3c60eb69562", "indicator--55247861-65cc-4e9b-8ca1-0fef2831f270", "indicator--adb9eddf-6f12-43fa-983b-1e5103f9b5d1", "indicator--287bd8ab-fc64-42c0-920f-1efb887d6c92", "indicator--4c2dbd5d-9259-4cbb-8429-a4f34ee216a9", "indicator--b14b0485-4baf-4f00-8e1f-30a1d2967a74", "indicator--18766027-6264-44c9-bc93-1845889f877b", "indicator--3acd23a9-04b9-4b1d-9a17-42f0fd4eb8e2", "indicator--5c10ee55-9a8e-435b-9c4d-35666bff688f", "indicator--1623f6ed-7e3f-49f0-a08e-a43523dd2b7f", "indicator--5e4d3a70-6ea2-4cd6-8836-1b7db402b6cf", "indicator--5fff289b-5f72-49d8-94ae-6c1cb56e94c9", "indicator--50d9fa15-75ed-40ce-a80c-f7dc6de777cf", "indicator--88641e81-b6a9-4488-8e95-cd85c2116e1b", "indicator--ddf7fa9d-bc6e-4626-9a40-6ba6c1d2f5c2", "indicator--17cc646a-d614-43ee-b80b-fe69009eddbe", "indicator--0f87df98-89ea-47d9-9101-0d36404ebfcf", "indicator--749353b7-5828-476a-8fec-9c5309569692", "indicator--6049044b-77da-43a6-9e1c-a3f6d1a7699e", "indicator--42b4a83f-8eec-4942-a21d-437aca9215c1", "indicator--8c6735e5-6b49-4621-befe-ea1ba12e57dc", "indicator--4109b295-a5b3-43a5-a344-9037dc617e4e", "indicator--7c2954e6-c7c2-4b63-ba03-0cb754e41b7d", "indicator--60d19f20-01c7-4c44-a921-9a53b424e16d", "indicator--1198a308-bcd4-4e22-9f23-b39e120669ef", "indicator--cc9e2cd8-8ec6-4cdb-9539-cc5cf3220e27", "indicator--aab9351d-5752-48f5-adfc-8e41ae575d28", "indicator--74a3b782-dec0-4e3c-a31b-6f2b23a194d1", "indicator--c0c4b72f-453c-4b77-925d-3b4b7388eeb1", "indicator--cfb26c89-a45f-41d1-bd56-26e8c273d156", "indicator--e0278039-1bf6-41df-9c38-13b1d97d3456", "indicator--780532fd-c0c0-4b97-b11e-f3f127e23920", "indicator--c75d2cdb-430f-4ed0-8b99-5df489fa5bf2", "indicator--3ba0ed39-d5f0-44be-a752-5b64be00483e", "indicator--1c81c030-f7de-4a4f-8f14-b475ddc0a863", "indicator--c5ad2c75-f7d6-4594-a94b-ba6e2ee23cd5", "indicator--d0756a99-c454-421f-9a24-0e00cb057bc8", "indicator--68488c5d-12e0-4f9d-b179-32ac02b97883", "indicator--1c39510c-117e-461c-9641-c01054d43796", "indicator--ad848617-c5f5-4dd0-a592-066f5cacd1b4", "indicator--9e2256e7-a053-45a4-855d-66a05b8d09c6", "indicator--d12ec3a1-b0cd-4323-83c3-78a63895dedd", "indicator--1f7649b5-9b38-433c-912f-d57941d3c352", "indicator--16abc784-979b-4f35-af58-766abb9f2140", "indicator--07618120-bf26-41f7-bc04-104f2fd505f2", "indicator--b0cf2830-a71b-4ba6-8ea4-0a26ef65ed77", "indicator--0c8fe903-7271-4394-8e35-9cdc429f6d64", "indicator--62a85b42-210d-4ccd-83ca-0b25edcaf935", "indicator--4d23de10-17be-4227-8c8b-a4824f1463e4", "indicator--781d69f9-b188-4455-9101-dcd9c9da0d96", "indicator--dd12055c-b994-4d57-a272-041f52cfcf58", "indicator--91743e48-26fe-4ebe-be00-fa15a4aa7a99", "indicator--4f6bd9e4-ed40-4340-a4c8-65da0700c813", "indicator--8c41e83d-2c9e-44da-b800-01bd10042ba5", "indicator--c21ef9b3-bb19-4447-8020-9ef60e0c90ad", "indicator--e738ef6d-3231-44f3-8f03-a10e3e9ca1e2", "indicator--6583e535-5598-4fd3-906c-6cb93c5e37ad", "indicator--e38dc59e-7b76-4494-bb8a-c9dc7b5bb428", "indicator--810289f3-584d-4214-bcaa-3e80839e5e28", "indicator--909b0174-124e-46dc-86eb-f84091af2b23", "indicator--662d7bd1-d84c-487c-aacc-dde7c4465da5", "indicator--b56bcaa0-f6d8-4636-8a70-36e9a39ee97c", "indicator--af12bd11-c265-46c7-8918-5741441c4952", "indicator--11384873-5324-4a3d-b02e-6027e9d7213c", "indicator--422587fb-1379-417d-a96e-ce637ba7d5a1", "indicator--925e760b-1def-4b24-94d6-4fc012111759", "indicator--3c1770a9-142e-4b01-aabf-02f55bdcde00", "indicator--fe0a613c-3247-4fee-8ef9-6d4d69c8cda8", "indicator--6cca7a29-820d-424e-9190-87a64b0ede30", "indicator--909592d3-e19d-42cf-a562-5ce458430833", "indicator--bab9f0d1-ced2-43aa-a5a8-1ad0c44b2a39", "indicator--49ea37b9-3ac5-4119-b866-745d46e1c89b", "indicator--d2c9a31c-67fd-4159-8152-f76896f03f26", "indicator--03277900-5e99-4eeb-b7fb-1b261009baf3", "indicator--efe055f9-1430-453b-b96a-d00efcac8b4d", "indicator--0e1a4179-fb8b-4f34-86c5-a70405741596", "indicator--164f1793-48e0-4a62-b8d1-b7471773be36", "indicator--23df3fb5-4297-47e0-bb30-6972627fb0f2", "indicator--81e30b81-443d-4a0b-9abb-c159d9d9dae1", "indicator--c0950689-ddfb-442d-baeb-b1572a444c2d", "indicator--b1ba9027-2b10-4b9b-bf1a-1600e45be2a2", "indicator--6da5e211-866e-4703-9cf9-589a0e65d79d", "indicator--c64581d6-b73d-48c9-ad0e-8200199c0647", "indicator--16991502-3321-464b-92c1-6dd036af9136", "indicator--c08909ce-6636-482d-82ee-b6578154fd7c", "indicator--8f34e0df-aa14-4232-b948-37b7abb192e2", "indicator--432f7507-7e2d-4364-b1ad-e00b3daf9a33", "indicator--8a585435-0174-471c-8df4-1d92f315d9e4", "indicator--ab8f6365-8cd4-4ac8-a8bf-c1ada5d8930f", "indicator--8f584a49-51d3-4377-aca3-ed45cfeb0df3", "indicator--dbb1b601-ba0e-4fe6-9eb2-57fc7489cda2", "indicator--9d92be87-6a09-4df8-9810-4ca38452b25c", "indicator--24699949-2d68-482c-85ac-b2869d00b8d2", "indicator--e3a041d4-e983-4bfb-b391-e603f8da2760", "indicator--95bf3011-9939-415e-8cbd-288cf8c59eff", "indicator--a466c230-2f94-473a-b28d-fe5ae53baa13", "indicator--838a9dde-fa18-4b50-8ca3-85a2f81ce821", "indicator--ec658b78-9d91-4316-a53c-bbfb5f20738d", "indicator--833bbfcd-94b3-4849-bd38-6ac26bcf1b09", "indicator--7f2a5f83-2869-4512-b667-7aaa5a6d59a0", "indicator--197d95c5-3a84-4012-a942-869e0aaad0a9", "indicator--8d6ea664-9cc9-491d-b091-944d47cee618", "indicator--b305330d-9336-4325-9b5f-9020fd3e19a6", "indicator--e0c4d45f-1214-4f1b-ab78-a469704e6412", "indicator--8099bcde-ec6a-4e27-bf4a-2ab6932dab8b", "indicator--08ffa3f9-5c8b-4241-a874-11fd7e15ff36", "indicator--12daaebe-920d-40ff-8f8c-fbe9d402cbf2", "indicator--da6feb81-ea0d-4e09-8838-8d15b66b8256", "indicator--ab81f793-9525-4fed-b00f-11bdf07d4cf4", "indicator--c829921f-5543-4ee6-ba32-81cb0f7106d7", "indicator--6481b851-a25f-4bb7-a4cd-0baf2903d262", "indicator--d9aff76a-2c79-4ac9-8a2c-22b38a1454d9", "indicator--6596612f-7b58-4cfd-b9d8-f7a44db66906", "indicator--58dafb1b-8b72-4ed0-9502-8e19572c8873", "indicator--e2be1483-a3ce-475b-9f15-c1f8d93c73e6", "indicator--040782a3-8051-4d7b-a86d-cc0c4d515762", "indicator--a6b98a15-cee4-48e6-8a2c-388d3c3358fc", "indicator--a6f526fb-85e0-4a8b-81d9-f563b4ee5b58", "indicator--90f2bd38-ac4b-43a3-80c8-394e811b95f8", "indicator--1d1dde37-1ca5-40d7-8080-602f00eff296", "indicator--891959d3-21b8-4ae3-b5eb-f965f75efc3c", "indicator--6415fda8-1e76-4b6c-a00b-98b3f65f42b2", "indicator--46014b42-de4b-4edb-9f4f-b8ab10e66ab4", "indicator--8341216b-9f55-4f8b-92e9-54521f7b1608", "indicator--3eb5f278-31bc-42da-b5b2-54d20b2f09f1", "indicator--4dde8baa-012d-46dd-953c-ad22d6e520bd", "indicator--47e5a7a8-6ff6-4596-9a72-4c162fa9fefd", "indicator--4fe865c8-9354-4d02-b607-ee7609ce3230", "indicator--3f23fae5-52ec-4556-9704-596697ca896d", "indicator--c230056c-f413-4c4a-850c-fb6ab0cb1611", "indicator--58cd8b11-2860-4b7a-982a-3b89a8cc35ba", "indicator--49be39fd-ffb3-4adc-8479-185850704455", "indicator--95406d21-f247-40ac-aadb-9791509fd05c", "indicator--8960a23d-1573-4700-a090-329828e7a6f0", "indicator--631226db-c07d-4519-b210-2e3f55fe8f13", "indicator--c1eed788-d9aa-405b-80c5-f0d627b8e3f5", "indicator--828e35a7-ca15-40c5-9b78-df828c9a8808", "indicator--7e438203-f4e6-4efb-986b-d8e76ed67249", "indicator--3565f94d-1c25-48be-8565-bcb84f922e9c", "indicator--3dfe8b49-036e-4173-a359-b51468400a0b", "indicator--412ff1d3-9b84-41c2-8308-2e5591eb4567", "indicator--9767adb9-437f-48ab-8f17-2ecb78a01ab6", "indicator--8360b438-2d91-4f30-a2bd-b169232afacb", "indicator--517a587c-9dc8-419b-8d72-b4c8b5e6bf1d", "indicator--68c88c0b-6ac9-4693-bfad-c7fe5ad303a5", "indicator--af94d16d-8e8b-42c2-a10a-81a64b0ba5b7", "indicator--569ca587-5bc0-439c-8382-d73ef89ecf1a", "indicator--9b6eabcc-9a45-4b12-b5af-a517e5687d0c", "indicator--378195a2-8faf-4fb3-a5a4-3c336b1e21e4", "indicator--666f2146-5a11-4339-b727-4eb8336d06f8", "indicator--f53f323b-7848-4644-b608-3fe0d77caf00", "indicator--e67ff9c6-5e09-4284-b2ec-a9cd05293823", "indicator--eede27af-2c5d-43df-b781-e14840fb9cf5", "indicator--18dbe88b-3bd0-4249-9415-cfe32a509031", "indicator--25569cf9-7259-4a49-8871-f06a8cc08d96", "indicator--076752c6-4610-4580-82aa-b3bc6adabf4e", "indicator--be1959d5-b540-427a-a8d8-be5f5ea66815", "indicator--406da547-57ed-4695-b9ad-8bca38192409", "indicator--81c39c68-2557-4893-99e4-c509f21a18f7", "indicator--62ecba3f-5391-43fc-af7e-daef57c9e483", "indicator--0965c4d5-596b-482c-b735-84424bfc06ac", "indicator--147946fe-d164-44a9-a50b-a80f5287c511", "indicator--75f87540-30dd-49ca-8869-61701262bd16", "indicator--116f4faf-650d-462e-ad35-03f12d2124ed", "indicator--8e092c71-78b7-4f73-ba2e-a2be222ca1a6", "indicator--531e5c18-2bea-4607-8143-b914c7b59161", "indicator--321362d2-080a-4b25-accb-d65c2d7004a5", "indicator--5a26bc34-8e05-47ac-9409-54ffefcf8662", "indicator--e23644a5-85c2-402e-a8e6-3b9718295448", "indicator--e15b1609-8b02-4a36-9c04-55c1772d52ad", "indicator--54de06df-326c-4e8f-a4f8-14545d2137be", "indicator--4d3b4f1d-8248-4ea9-9be8-4671bf399506", "indicator--d9e4275d-3428-40c8-9462-05186f1f552e", "indicator--4259afd7-00ea-4fac-bc88-5767041d4fa9", "indicator--f3b64952-8edc-4504-a6c2-e02b802063b3", "indicator--e4d0e775-88c5-475c-bda7-4caed47edc65", "indicator--d561e6df-920a-41a0-81ab-37152d7ded84", "indicator--10756e0e-5785-42de-9de6-393b3f27ff9d", "indicator--627f07ac-67e9-4267-af85-ab9bd49e1451", "indicator--151447b9-cfde-4e28-951d-d2569884f166", "indicator--121e00e8-e390-4911-83e9-b6f750b3ea37", "indicator--427fd4d9-54e7-4d17-92f1-2ad82c1ba92e", "indicator--3e624e1a-9490-4745-861a-9f95ff5df51f", "indicator--424c8ba4-3f00-48a1-af11-0813494ad257", "indicator--9ac1ce9b-7dea-4af2-b733-7795b8964ec0", "indicator--c0f6a83b-38ca-4b49-a6b7-fe3bf97e5438", "indicator--f311e85d-e41b-4df6-905b-b7c89a9ed611", "indicator--86856abe-7078-4274-b8f0-1e4966e68a88", "indicator--4ddf2e07-90a6-4795-8e05-30d4eb87217c", "indicator--67ac2d76-ef0e-47f8-9fa7-4161e5b20447", "indicator--9a77ae4e-db55-4f9a-81ca-01750eee0881", "indicator--0cd82a98-f17f-4a57-972f-0a03ba2edb12", "indicator--6ef7430e-b71f-47f8-b1f7-e72d14d873ff", "indicator--bb9d8b9e-4f4c-4e55-8976-e7bffd55b452", "indicator--87dd7389-5ba3-44f5-96a6-a1ccc47e9601", "indicator--f334feb4-bbe6-4a69-a736-efca6c32cdf6", "indicator--22143681-7a48-48b2-acfc-b129f795c8c7", "indicator--a417f71e-e9a2-4c0d-8a82-bf0015209286", "indicator--7623acfb-5980-42a7-b9d8-0a9412f70742", "indicator--47760b9d-37b4-47e4-80ee-46fa42d0922b", "indicator--3348b713-275b-46e6-bffe-3adbaf8212ea", "indicator--05bb940e-cf4b-4943-ac32-95746afb5f30", "indicator--df254898-2c29-4383-b76f-839528527f8d", "indicator--8f9eb00c-8c94-408d-a1c9-cdb272fc5099", "indicator--ac4f4c7d-38a0-48b0-b9da-c100c44f5728", "indicator--2853de1b-3e00-4b13-84d5-6cb1f4a54506", "indicator--677ee892-ec5c-4617-9f26-d15d39bea615", "indicator--e5b2c577-61dd-4ad7-99a8-0c48bd9ec551", "indicator--9bc32da4-2eaa-4e41-9d35-eaa81601fee4", "indicator--67bc300c-192f-441a-9065-adc0a91ff282", "indicator--ccdf2dc3-ab3c-49d2-8d1f-227b27db1343", "indicator--4f098e70-726d-4db6-af7b-544b65a430d2", "indicator--d34677c5-1185-4957-bde0-f3d94b0de434", "indicator--e462c3c9-92cb-4e58-8deb-3d98f7b06ce7", "indicator--d255d1cb-f7c3-485e-9e16-512dce14af2c", "indicator--13e87412-8e24-47d1-acef-19a91a687235", "indicator--c41581e8-2568-4bad-bc75-44893e35e570", "indicator--78098756-c6cf-4806-a7e3-3fce1bc5f0c4", "indicator--d9d6d7f1-7bab-42e6-9e47-7f3435b43b6d", "indicator--decc5551-e417-40a1-ade6-71339b5eec43", "indicator--b9a01c7b-4631-4734-a2ef-515e95739501", "indicator--df439737-ed63-4629-9a0e-e0c4580e26fb", "indicator--c65c9232-389c-40ef-9d82-1859bf5e731a", "indicator--eb9c90eb-ce87-462f-8053-68a73b18eaa7", "indicator--31d68d6e-b195-4d00-9cd1-b03bae397842", "indicator--6e26425e-ef99-4faf-a6a7-4d2a167e25fb", "indicator--4ff43424-a3c6-41e3-a2e3-0e45bde6d8fb", "indicator--1e787d9f-a00d-4577-bb1c-2b9119b9ebd6", "indicator--89a81144-040d-4cce-8e88-dda92c3ecea5", "indicator--5541d81c-95af-418e-ae9a-94030bcc377e", "indicator--350f3d35-050b-4664-8e63-f39d76b3ece2", "indicator--bbc782bd-cdd5-4a12-b821-cf22861f6b28", "indicator--3f827c17-aaa7-41b4-b2f1-1c2a5a85b15e", "indicator--0db19d29-19d1-4d93-aa40-04d82bc41b60", "indicator--a0c1b656-733e-47a4-8982-d5d516728f9a", "indicator--2d12223d-e85e-44ae-9b91-d3461da3dd51", "indicator--77a0a1b0-41ec-415a-8552-2ffee8ef0733", "indicator--afb8f67e-7454-4ca3-a92b-555c36d2f19f", "indicator--96738886-4887-4146-a095-4774f649e8ec", "indicator--e1709024-cc57-486a-ad9a-a11fa9ee0a45", "indicator--6731a262-fd20-40de-9fa6-aeb266e7fdab", "indicator--5e1c3e67-0ab3-4652-b07f-e7df07c6acdb", "indicator--8af7dc89-0da0-49ac-af33-d43fe0f9909c", "indicator--c96fd808-00b4-42c0-83d8-fd492a5b74b7", "indicator--64c32809-771a-43c7-9d19-69c408866357", "indicator--2707adf0-fd26-40f4-b7f7-255433faf6dd", "indicator--fbd64f85-b487-4bc0-88b6-34156a3866f8", "indicator--25084ecc-20ce-4175-9177-b1ad152df56a", "indicator--6684927e-c371-4ad4-bd5c-634a6e990175", "indicator--c3ee7152-9c3a-44ca-a637-f683dac981fe", "indicator--c4eca177-d033-45da-9cdb-4b4355cf70d2", "indicator--1354b15d-bb8e-4fcd-b940-47ecfb111bfb", "indicator--52b7f4fc-6205-4c0c-ae97-10edcc263227", "indicator--c332f928-c26b-4b76-8ef0-d2d3ccfcc0fb", "indicator--f93aa617-3b15-46e5-bb62-874723cafb31", "indicator--45573fbe-4c17-44a4-9ddc-574c8b7c45cc", "indicator--cbbdaa7c-154c-4b25-ab3d-20bfdde2243b", "indicator--151e536a-c170-46a5-9bad-28ee7bfc55c6", "indicator--5df8f759-eea7-4545-aa2d-8c59607f665d", "indicator--7b62333b-7467-4392-a55b-988b93e083dd", "indicator--fe17cab7-51ec-4940-8d80-7e60f4671c70", "indicator--416c6cfa-dded-4e58-a064-7398dc677ffa", "indicator--2c7a4857-1c55-4847-b5a9-af4be98b7b7e", "indicator--db5696e3-eeee-40c6-af0d-dbc8a98ee33a", "indicator--5cd390f4-02b1-4049-b15b-0e02d9d44b97", "indicator--7c97133a-0865-485d-acb8-7c496d6b4dce", "indicator--a365c1d8-d470-47b5-944d-e00d3cb1213c", "indicator--1a7cbaed-7cc2-4707-9f38-1833399e035c", "indicator--74585b74-b886-4c1a-b9e8-4dbaf456dc00", "indicator--61295b13-bb78-42f9-a303-9a7dd8890cea", "indicator--c520aab6-e5f5-4363-b76f-9e9885ef5e15", "indicator--9ab9c341-5911-41f8-9c9c-b119b7cd1354", "indicator--e4ef0c13-fe9a-44c3-b6a3-707601d92c35", "indicator--f3cb7f1f-0c5a-4613-9f27-bb05152a7499", "indicator--f6caf142-94e6-46c8-a6c0-4a27f0e7b065", "indicator--01e22c75-5188-49db-bfbc-c92bc5c07b45", "indicator--c8dd0272-6574-453c-978d-652179dc73ec", "indicator--7d7af127-5813-439b-9169-0345fb40c2b7", "indicator--c9096ff5-5187-4cff-bdd8-9ecea488bfc5", "indicator--e1e62041-2de1-4e6c-9666-0c9438dfb14c", "indicator--e8d09a90-0376-4b57-8c57-6f4ee4d185b0", "indicator--c9b20d67-2001-4fc6-89e5-24d545646f57", "indicator--dee8a823-3cc0-447b-9369-059fd951999d", "indicator--eeb11461-0e63-4fbe-960c-eb4427d42961", "indicator--d74ad6a9-1a57-4e70-97ef-609bce366d3f", "indicator--bbf95376-7f61-42e9-84de-9d806bd96a9d", "indicator--61864524-2302-44d8-97c7-6ad8c5c07e70", "indicator--11ea4181-2bf9-423d-ac46-0f8e0cdddde3", "indicator--00d47cb6-8252-43ab-bb6f-b32ca364327f", "indicator--9d1ce085-cb54-459f-a93d-657d19d5a4af", "indicator--69582309-992c-426e-a2d1-dde0e318d987", "indicator--76be93d7-09e3-44c0-a43f-4ff3c07495d7", "indicator--70d3ea42-7541-429c-a53f-cb188cd5e47f", "indicator--0c7d0dcd-fcd3-4708-8886-12ccf1f78006", "indicator--931330e3-5a70-4717-96db-c555cb4c3b32", "indicator--cd354bba-8e89-4937-91c4-ea7fd3ffba61", "indicator--92875751-64ba-4340-bc39-4fa31564720a", "indicator--3660ca2e-008b-4a47-83ce-e0cd172cce3a", "indicator--57d062c9-38f0-46c3-9485-a2dacb3f3cc5", "indicator--f2169c5e-ef19-4efd-99a0-d9e3cc5cab41", "indicator--6c93929e-d100-4273-8442-b45d398aad4f", "indicator--503618d9-89ca-4f69-b8a9-9cb94223ca45", "indicator--f12cf975-0714-40b6-bc0b-10c971455d16", "indicator--7a19da28-350c-45d8-a7b0-a4f5d8d602b6", "indicator--173c8753-f61c-420d-bb5b-eb960896a363", "indicator--fb06e293-97ec-4ba4-930d-85b0edf8d4fb", "indicator--4e5718c5-3d3a-4f91-8f14-41bf343aab2d", "indicator--c6eb75b1-b454-490a-801b-368036c98817", "indicator--55f30e74-e3ec-4766-acbb-22414d937b85", "indicator--99409d74-ae4d-4fb0-bb9d-9355d423d37c", "indicator--f2e3c044-481c-432b-9f50-cf97444a08d6", "indicator--23651e9c-d650-473a-b866-43c6693a74f1", "indicator--2ed41998-2aa4-481f-aa06-b5c3f521edfe", "indicator--a48926bc-9287-4e1c-a87a-28670f65c51a", "indicator--b823c0da-df6b-449f-9d53-3891ae36936b", "indicator--47285b4d-bbba-4d4a-b1d1-ab808c9fe68a", "indicator--fb55f4bc-f675-4a1e-8e74-3878804c2169", "indicator--bfa38ec3-68eb-4ba2-a977-258cad157e98", "indicator--0e003563-f178-45ef-8fb5-b9f47b61a8a3", "indicator--bf25988c-496b-4844-a336-21f8e825599e", "indicator--217498ba-3d84-403b-b08c-2c9c32eb92e4", "indicator--05d21233-693f-4cfc-9ef8-c8f9b1f4d962", "indicator--a4ae805b-c912-4cba-88aa-24efc8a28eb5", "indicator--51a21c7e-1752-4085-a729-7ebb1372116f", "indicator--b7d6b8c1-1615-492e-8565-6aacb3c71a55", "indicator--1334d526-423c-45f8-b4c1-60a24f0ae071", "indicator--a42b5a27-d551-44b2-a91d-94976c8a20e1", "indicator--c29bdeb6-8301-42e5-9a60-435271671715", "indicator--576fb7b9-97f4-4d65-a90d-f779fb9c1d91", "indicator--84761f2e-6fd3-41b4-80af-37f44f652af7", "indicator--648db2c2-0019-4c84-a5f6-4c0728795d84", "indicator--c32d6cde-47f4-4551-9eb2-fd9b63d176e4", "indicator--d2af8883-f68d-4d93-a738-7c538ae02dbb", "indicator--366d11a6-179b-422b-a6cf-e3cc8f557c6b", "indicator--03726ba3-dbe8-4854-9921-4add4262abfe", "indicator--b1aa1c3c-a010-4ab8-98e4-fa88cd4adff6", "indicator--9e6e1d18-ba66-4b55-8c19-370bc254bc72", "indicator--6a471d8a-91ba-4d77-b9ed-dc81fc3c9da7", "indicator--e2bef328-2be9-4a2a-b046-0335b100f418", "indicator--66be9979-e54c-4364-9158-e994fbf97b24", "indicator--59a5a898-7353-4e8e-9c0e-dfd2452aea99", "indicator--0b1b94d3-f04c-49dc-a263-fe3634337d3d", "indicator--36642ca4-3966-47d5-8bcc-9fd885ccf7b4", "indicator--ac8c4f5d-b3d3-4b59-88c7-e588b9906850", "indicator--848d7ed8-eb6f-4468-997d-ff6f5acfa14c", "indicator--61a6e0ee-9ed6-494c-93c4-78d5e07271ca", "indicator--cc8ec4ca-7c05-4f69-9a2f-84fefff639a9", "indicator--9f7ce696-4dd9-4b47-942e-6c9a4154f8af", "indicator--7f4aea49-fe33-4b94-854d-85aee6a2f8ef", "indicator--add95bd1-c9b6-49a9-a792-af1910fa0b76", "indicator--39f262f4-1454-42bd-b7c3-6b276d6bcdcb", "indicator--51cc607e-db12-4db6-a749-a1495eab4aae", "indicator--fbfdbbc1-5e09-4906-99e6-51a5ea203341", "indicator--be193b84-f793-4f0d-9d5d-a09136a3b308", "indicator--d4cbdaaa-64a3-475f-a53b-64754cff89b3", "indicator--66cf47d1-afc9-4da9-ace4-4dd760ec3b8e", "indicator--d2a6b14e-95b7-46e9-85ce-7d2055833193", "indicator--6fc1aace-b1ab-4903-8a26-058b039200c2", "indicator--5e187797-18b7-40b5-9613-29a5e1b0ac0a", "indicator--09930e24-b20b-4ec7-bf0a-af6bd34d304d", "indicator--021dc967-e116-45b3-957a-ed995ae4ddb1", "indicator--7649010b-eda4-46e7-9598-bb844b0484a5", "indicator--20d649d1-fdf3-4bf7-acd8-b882786b6b85", "indicator--82613d5e-391b-4c04-a8ba-920d5e964f8d", "indicator--254168a7-e77c-40ad-ae57-ac096d9126ae", "indicator--95c17dd2-6935-4df3-851b-c824ef3dc6c5", "indicator--86bd5403-c4ce-4944-8007-7d4c2e520d6d", "indicator--c5615672-690e-4b25-956f-a7ae7f74edec", "indicator--8b56ad44-588b-4a6f-af31-a4503f2714df", "indicator--cd662e76-b760-4515-be0f-eb744a387fdc", "indicator--5fba791c-5abb-4dd4-a530-8b499a6d0c5c", "indicator--59137821-29ce-41a1-b51b-9f31b9518486", "indicator--3537a8fb-b557-460a-bfa0-a65b837fbf4a", "indicator--00e6441c-7d33-4830-b15d-cb0b7f00c59b", "indicator--2bf97afa-e611-4a11-bd6a-7da6a51f0a6e", "indicator--576a9ecc-c197-4ab4-acab-0f45d5d0fbe0", "indicator--7dbff4b8-9d9e-4f2b-97da-8e23c18513be", "indicator--848910c9-c95f-444a-ac86-4f31889ca198", "indicator--830cfcae-c110-43ac-bf03-f2555e6a38e7", "indicator--a9240d85-917a-49f1-976b-3951e3e7f29a", "indicator--e7bf3c66-7493-42e4-bfe1-9216e0fbae4a", "indicator--339ffd1d-fef9-4f02-b2d5-3d496954d1f1", "indicator--638a409d-c1a6-489b-b8ab-c7249c900a7c", "indicator--08e3405c-d89c-40d3-8d52-61091af9d7e7", "indicator--625e3f09-2759-4a34-9de6-a32788e1e01a", "indicator--f5abda18-e15c-4db3-b989-6dda49892663", "indicator--af906d57-4475-41a1-99e4-33345ab03c8a", "indicator--7b9de79f-124e-42d4-a3ac-23a3d9b088b6", "indicator--8c14617a-aadc-4f31-b4ea-90383361ad88", "indicator--0c045423-fb8b-47d9-a028-aeda44c1b798", "indicator--c418a968-1d52-49fc-b7b1-8e9f269ba3fa", "indicator--84ce2a47-9f8f-42fe-b0c2-f2ef256d3fd3", "indicator--49619c19-8d54-459f-ad6c-fbccb0db4ae1", "indicator--61c80bfb-5c3c-4ae5-984e-667bf75bf37d", "indicator--130f2fd9-8a83-48eb-bf10-1d6d4dfbacbb", "indicator--47f90995-0b6d-41cc-8361-2b85134f6764", "indicator--988c11da-2a1b-4914-888e-caea79f94298", "indicator--1fa8084b-3e09-442e-8ec9-77c4ed231221", "indicator--a96c8824-7294-44e5-86d6-3c9dbde85f1e", "indicator--949a249d-7bb7-40c6-a890-78be03ac1bdc", "indicator--47e4141f-de2c-4042-9b75-cf6bbbd2ad2b", "indicator--1cafe84a-b91a-4624-8443-da13986c0862", "indicator--a26bc230-24c4-4eee-addb-970e4451b137", "indicator--11b35eba-b143-4aa3-850f-fb55c71d9c4c", "indicator--ca029a41-cc13-4ce8-8fb2-47c4ecabaa7e", "indicator--cc30826b-5a1c-4091-8f78-45b4492d9c57", "indicator--f38768c3-08f3-4012-a1d5-bea05d91e81a", "indicator--8afbb245-4d96-4f9b-8efd-cca567416eda", "indicator--fab8ac52-aa5e-45d2-b633-ea4bb513d630", "indicator--2e3e8f0c-6231-4537-b977-93f9de934f26", "indicator--cbc3792e-d0b3-4381-8ad5-9973be0566cd", "indicator--7ce338e8-f10e-4e06-80cc-1c6bf5a922e1", "indicator--1d5b4bcd-8d42-41ab-b851-5b967347368d", "indicator--e55c82b8-ed1f-4b1d-908f-4fc0e1e56370", "indicator--bf15542f-650b-464e-9dbd-89d88656b8e0", "indicator--4e2827b0-5ade-493a-80e1-30b0e5523b42", "indicator--e228fbbc-002c-48ce-aae1-f17f36d72829", "indicator--aab71595-8773-42fa-bb08-1305e8c5cf76", "indicator--b87dd2a0-fcd3-423a-94aa-10c09d0d5f5b", "indicator--ec196592-639f-4c4c-aa85-a828959d3153", "indicator--5523ca9a-8931-48d4-a535-85ad14c6f4be", "indicator--b2f9c457-973b-49c8-b7e2-6e4211f0be3c", "indicator--c17eea20-2495-410d-98eb-1177848309a0", "indicator--2cdc4163-6eab-4fb9-9af8-68d92728bb70", "indicator--fcad9909-51fc-4d0e-8fed-60ae3567c780", "indicator--57708097-6bb3-4131-9ac4-42382d7e823e", "indicator--1b8b639d-e7be-4861-8318-fbf6c5ef779f", "indicator--de8256b5-0750-4622-88a0-53e5990d4ebb", "indicator--515f0281-b43d-4f6f-a9f4-f1954ecb1aa8", "indicator--e489543e-7bb4-4e85-9420-a549f594549f", "indicator--445ee74c-447c-4a36-9e65-36153d5e8e3b", "indicator--72ff2148-0f16-4af3-8004-10bc868634b2", "indicator--f0dc9aa5-8c6d-43e7-8620-0c5fa4c9a374", "indicator--13024439-ce42-49ac-ab1f-bb727548f317", "indicator--4ffb3c2f-725d-46a5-b8dc-eda5858b7e18", "indicator--f8808bf7-78eb-4f42-abc2-e4ba15d9fe30", "indicator--6e886865-fd60-44d5-81df-0f92ecc3d7b5", "indicator--65f0d193-b816-480b-90c5-2c47fec3f109", "indicator--74f8b3a7-8a54-44de-aea1-df9b88556c3e", "indicator--45c4b491-cdc6-47ef-86ae-abb0e8ed835b", "indicator--43afb512-973d-4b3a-b252-3a85dae4e0ca", "indicator--bc5e88aa-3f11-4e52-88b4-5f56fc03983e", "indicator--e2ade6fd-2928-47cd-970e-5d8f3c8ead63", "indicator--90218ae8-7d02-4fde-b3c1-754c153e0d53", "indicator--a9f01be5-e4d1-4b3f-9028-92ae33df3cce", "indicator--84e30ed1-a963-4cfb-bdf2-4f070d7393c3", "indicator--9c644bab-6642-414e-826e-37c6e152d9dc", "indicator--b5f55808-54e1-468a-bf6b-a2d961aa949b", "indicator--7d77f459-43b5-467b-8785-3990f7e51e9f", "indicator--3ef7b6a8-801c-471f-a76e-7ddb684fa87f", "indicator--3b8efba8-c58a-40f6-91d0-73df3ac97ce1", "indicator--cfe77af1-098c-48bc-9310-8a9d5ebcb03c", "indicator--48a642f5-04e9-4aa4-8845-0bd5ac09671f", "indicator--7d775f9f-a656-4b6c-9de6-2f499623b54e", "indicator--df56fba2-5bb8-456d-9e50-0dd792b22735", "indicator--b8a30ad3-bc5b-49e8-afe7-8184bce17e5e", "indicator--acb31541-a92f-4837-8e43-9d31ab3b2d56", "indicator--2e3d04d5-ee4a-4e36-bcb5-ad2ed2d50757", "indicator--1054518e-4618-4dc6-bec5-aca513fc9a5b", "indicator--750fbbbf-f6d5-4bbb-98ce-756ef10cd387", "indicator--68dee526-b888-4699-a4fd-cbe507a866e6", "indicator--175d6dde-f883-4d55-b99b-dac802d2776d", "indicator--026e8469-8c17-407a-8171-84d2fef427a4", "indicator--082712f2-410b-49fb-bc8d-b5d08639fd7e", "indicator--a87f2a2f-12e0-4867-b216-cea32b6220e6", "indicator--0e127325-bc12-4275-b646-ba332a23460f", "indicator--be764126-4ed4-4a9b-91d0-c8363e9bc4fc", "indicator--26a0b82e-b62f-42fa-8ade-56bf680582ad", "indicator--572e07e8-d7df-475b-bc99-a29c1c68b20f", "indicator--b9b232f8-d6f0-4815-a0df-043016901c39", "indicator--30881315-0646-46d9-ae53-c8944bf668bd", "indicator--e08093bb-55e8-4005-859c-824d791914e0", "indicator--2efadae8-ae1e-408c-8a00-bfc731c4a08e", "indicator--6a8e96c7-a875-4bad-a662-9adffb130c05", "indicator--38ab5f5f-dbf8-46ab-843f-330a9685fe7b", "indicator--54b2cac2-f262-42dc-817f-dcb91a4a9084", "indicator--04d91b9e-8288-4415-a305-cb9e8e62b085", "indicator--587292bb-b12c-483e-858c-1944524a60af", "indicator--75b8d6fe-e326-4965-aec9-947521d596c7", "indicator--b93ba38c-d235-4c0b-b21f-b14fa95b5a36", "indicator--e8e7fb63-08b4-45a1-bac6-ede1bac6c854", "indicator--e5cc2ad8-fedc-4d13-b475-be7ef09d0c5a", "indicator--f97f10f7-5c7b-4371-96ec-c9a4c49e12a5", "indicator--4c5b78f6-0764-473e-ba9c-b483b047a757", "indicator--6e1e58ee-0f79-4e49-9a69-76dd2b75cef4", "indicator--a8bbe3de-f334-409c-b666-8eef1b822542", "indicator--46723b8d-96ae-488e-9ff8-fd2dc4c68276", "indicator--cb17512e-3674-4f58-a320-a50606587656", "indicator--ead0588c-c40e-4bac-a106-9b8ae45ce153", "indicator--43a6410d-e651-49a5-8bea-1d10f93b1bf4", "indicator--c822ab29-7dd8-48af-80f9-75bbdc7501e5", "indicator--5d6680f3-6c2e-4da8-9207-22b66434e337", "indicator--cb2929d8-a9d2-4dd4-9b2c-dd075e7d3f9c", "indicator--ca9f8c3f-fe75-4b1e-a958-85894a62da4b", "indicator--09a89e73-44f7-4e9b-b23d-c5daf85e0e09", "indicator--8bea5dec-9c0f-4e98-99dd-a4ad4a4bce84", "indicator--42e90760-293d-4eb3-b4f0-ba54e524177d", "indicator--ac2a3053-6c3a-4a1f-8085-fdcdcdde3ae4", "indicator--d63e8377-bb5e-4f1e-bbef-8cf945ef0dc3", "indicator--204cda88-fc6d-4f6d-9c3e-ac5da2b25649", "indicator--8286fa7b-6cb0-4044-818c-d4d634974f56", "indicator--b156f263-0a78-4ff7-8063-e8d421952317", "indicator--705f354e-b01a-42ab-b6a7-9f3d8f3be4ee", "indicator--a15a7568-1afb-4a3c-9807-6e45a50bfa00", "indicator--acaf48c5-e32b-423d-b3f9-a38197e052f6", "indicator--8378379b-f92e-4a5b-b8d4-2cc88e68ccf6", "indicator--942c5af9-2fd3-47be-9560-67682e6f8b1a", "indicator--2866fe38-357c-4635-a21e-96c83ebd0bc8", "indicator--a8af0081-a434-4532-aecb-599d12409841", "indicator--9826c81b-cc47-442a-a94b-6bee0c0f4acc", "indicator--bc706f01-2f27-4a6f-bbce-3c40aa9db50a", "indicator--970f97ed-c627-4b5c-98ea-8117be2ba7e0", "indicator--2170d998-79cf-4fcf-9f67-ba1ff92b6124", "indicator--6e7c9f4e-c690-440d-b1ef-0a08fa491ff0", "indicator--d5f1abb2-8e7a-4a8f-a370-18d48f9fca41", "indicator--e730375b-cdf2-4507-a755-554779cc0407", "indicator--0827a1e5-b17d-489b-86a6-2a61092d1e53", "indicator--cd1e82f9-4139-4e14-b227-48015ebb3c8d", "indicator--ca79987a-941e-45b5-b9f4-2e6195995378", "indicator--9d0a0493-25fc-4efe-9b60-c60c324d8914", "indicator--f243a668-2eb5-494b-935c-ba1bb58599c6", "indicator--39e235f2-0a5e-472f-8cd9-f6e3b628636c", "indicator--62b34434-fa2d-4b28-9a48-452cab8c0bb1", "indicator--809ef655-0214-4f92-83d0-e50adf70bdea", "indicator--aa9eb387-b39f-43ef-a771-763d20ea2b8b", "indicator--efc307b4-5d9d-400d-a857-66be4986a6ee", "indicator--daaaee88-507b-471b-a38e-85b8ba863e8c", "indicator--13f834a6-02d2-4988-9733-fd731b3f9175", "indicator--797e2019-1477-47c5-8908-4322e25ccf50", "indicator--7022674b-5be9-4308-9360-c648e5d42230", "indicator--7ee15e65-2d8a-444c-bd5f-48c3dcc8d633", "indicator--d70c7c46-9d0b-4c37-806b-a0d86caac1ad", "indicator--dd2d146c-efc3-4602-94e2-6d2390727730", "indicator--2b9696c5-921e-404d-890e-9fb59067276b", "indicator--90876baf-e006-4c09-819b-90309bf3eb2e", "indicator--2fa281d7-946f-46a9-be77-23d98b6c292c", "indicator--dccda333-46a4-4f8f-80e5-8c96d64d8930", "indicator--7a6a4ebe-7738-4f86-9d3c-1288c8d9e17a", "indicator--2ab54783-34ea-4b2a-91b3-8ed17287462a", "indicator--15feed0d-bf35-43c2-a7ad-494018e7c9fb", "indicator--939b7ad5-ef0c-4cf4-bb54-e1fa5f73911e", "indicator--e5596dce-9ea7-4dde-92fd-f57391853a6b", "indicator--a7da347a-70d4-45f1-b20f-2dd882e2e819", "indicator--dbd52a24-ed7e-4cfb-a69a-8413f97b7156", "indicator--36207ba7-958f-460a-950e-6a246fac9560", "indicator--c16b7edc-dd42-427d-a734-ea8b2858364b", "indicator--4ba6ca9b-9f77-46c3-b332-9b2d4b0ba15a", "indicator--d96590e4-4d72-436e-9afb-8a70acd7e4de", "indicator--3d0c9d4a-fb00-44dd-9f1f-2e702cd47e87", "indicator--d39c161f-10cc-46e6-ba0b-51b78722aacf", "indicator--68604023-bdf9-4267-a70f-57b068ed95e3", "indicator--4047898e-a058-46d6-8397-ffeab0f1e772", "indicator--c6a4b9ce-4aea-46fc-bb26-c4e164f601e0", "indicator--18a039f3-df95-48a2-baf8-eac7b0dd4e3c", "indicator--90dd7354-1c4a-456d-9f31-675c27f02de8", "indicator--e48454d5-3dfe-4c48-9c1c-891c38400560", "indicator--99ce1041-1531-4893-a618-61a4cdcb084c", "indicator--1b074bd9-718c-4487-8e3c-3348744c1fca", "indicator--03788473-4cf1-4244-b8a7-9b0ebfb36af1", "indicator--4e4b7218-01e0-4a38-a994-9fcbc6add9a5", "indicator--d400e3ac-7638-4b79-b14f-c9d046c9ca05", "indicator--597f8819-973b-4e96-a735-53ceaf5f8c65", "indicator--b24d858f-4024-448f-b7af-9083ba1c8773", "indicator--86097be2-9c03-444c-a5cb-4fb4258881ff", "indicator--82d4d840-9ee0-49f6-bf6e-c238fe8b2d8e", "indicator--17feb1fd-0455-4e1f-93b1-223a92050545", "indicator--dd1ccb72-d3fc-4238-bce1-e2eda13e7ed7", "indicator--734819bb-21ee-448b-924e-5aaebca66259", "indicator--129b797b-029b-4fc3-84d1-2ec55fb3c7c6", "indicator--ee28d03e-d5ab-4ff2-bc6c-722749550f02", "indicator--8a692382-4868-4b9c-96e5-ff3b4f8b3353", "indicator--652563c7-0842-4ae5-aef8-6dfdaa43dfbf", "indicator--6a75b0cf-b8f0-4d91-a5be-5815ef8e696d", "indicator--690cd7bf-b986-44d5-8227-1e2930e5e1ce", "indicator--3b62a69d-6b86-4186-a7ba-a5badfebc259", "indicator--d381f912-48de-4129-8641-c1abe59a1e94", "indicator--639a4af7-e412-46b6-868c-a8b49136ab0e", "indicator--538129d7-7889-4646-bb51-657cb04b9229", "indicator--59e5cefb-e4e6-4abf-b5d9-c54fa8ff589b", "indicator--16574cc8-800a-4d5c-955b-70c958c730c4", "indicator--a959cbea-06b9-4c36-b948-aa4e78c12c74", "indicator--a4af43c9-b158-4a44-a19c-a83b23e46d82", "indicator--b67cec0b-5887-4aa8-95e3-4646c15e7a93", "indicator--1120d54b-5193-4095-a218-d4d43c978d61", "indicator--a0addee8-6a6d-4cf8-806e-6d3432e9fb69", "indicator--aa509435-46c2-40db-a40f-ad776c49d259", "indicator--ec1b8865-c11e-4a23-a84b-a0666c7f67a1", "indicator--0398f015-292c-456f-b00a-2d5a9c878dfc", "indicator--9ca899bd-b017-4720-aa67-fddea398806d", "indicator--8ba99a5b-2287-493b-8be7-09e9589b2bc6", "indicator--5e953ff9-ed49-47ee-9e3a-448efe6396c9", "indicator--a221e5f1-bd3e-4d77-9ef8-74cd27b8c366", "indicator--2a92585e-7c74-45cd-8219-b0cc129b4f17", "indicator--0ef8cd7d-0644-4674-a627-6a2a213a6b72", "indicator--e02ceb51-a13e-4c74-bc7f-008c922e1f2e", "indicator--419e3327-5a2d-4543-9429-ae1d340d6730", "indicator--6e295ef9-05d1-4a52-a86d-c57e0539d1c2", "indicator--6b9bc30d-7772-4af9-9b32-eb48bd229ec3", "indicator--16e8efc7-b96f-49a9-9a81-8c61f1aece95", "indicator--8cfb2717-82ec-4fb4-81eb-6316e38568be", "indicator--e104c633-36d3-49fb-a59a-19cac054ba32", "indicator--f15db0e5-4fd0-4dc1-952e-ca74a619c953", "indicator--569b61ef-1333-49aa-b6c3-f4e2a4c1a6f7", "indicator--e3728a53-80a0-481b-b99e-d0b810d70a6c", "indicator--f02668e3-ce28-4f11-8862-4eddc8924f11", "indicator--96a34eaf-8bb3-4419-9c4e-02bd7df7692f", "indicator--5be6787e-f4c1-485d-9d83-5e9e998f61b4", "indicator--a9bd34f4-b2ee-4ca0-b2a4-139cf0abfde0", "indicator--d6865633-0e36-41fc-9cd7-fa4313a037fa", "indicator--39a714e5-d29a-43e9-a4b3-da915219495c", "indicator--62452ae8-6c10-49c4-a79c-24b13b6880c1", "indicator--34bf3db7-59ad-422b-9f9f-49442f2efc4e", "indicator--9738dc8f-c976-47c1-a55b-4d1ed33ccf0f", "indicator--4c6860e9-d8a8-4d31-8b26-69322763794a", "indicator--dbc8938c-d289-46ee-bb59-ae8e5b82f391", "indicator--9eca6d75-055b-46cb-a978-bd19547239e3", "indicator--c5f753bb-269c-4183-a37f-ff2586a7b9f3", "indicator--809293c0-15dc-42d8-9e93-72a2ea8aaa00", "indicator--d65f2db5-a5c9-49b3-b98d-1d636e84ec59", "indicator--f6d832db-3543-47ad-a6d7-38d88f8723ae", "indicator--8c9c63a3-eea3-4d95-b72f-1e891a1ab39e", "indicator--baf8d7ff-9405-48e9-a06f-9da7a93a1e43", "indicator--60f2b929-010b-4242-9685-0d7d32d63603", "indicator--847eacbc-7535-406a-99d6-642dab872361", "indicator--b5b881b5-7e62-4141-9352-f2b6b10f2894", "indicator--da77f2a0-ed11-4e3b-a05a-898058e70801", "indicator--3ed7a867-604f-4aee-a84c-f937e0e1460b", "indicator--a7b7188f-a142-4c59-8d1c-8d195f61995b", "indicator--d75fab5b-12ab-404d-99ce-e1cd6e7f2d87", "indicator--9cd27340-bab2-44eb-aebf-8fec1c9d6c17", "indicator--bd9448de-e36a-4306-94f8-61d0b1f0197f", "indicator--435c94e9-5ed8-42cb-bffc-5324762944e1", "indicator--db81bed6-591e-4daf-823f-4f5a3fdf24e1", "indicator--b1c88538-e3f4-4a3d-a9da-57eb032588fa", "indicator--15a4ab5f-2280-4467-8abf-9fc88bd7b0aa", "indicator--7f1886f7-8476-4ddd-9de2-ca6959e45762", "indicator--c6c89750-2518-4d42-bcc9-29f8276db9bd", "indicator--1d56cd09-fafb-4f49-89a6-b40609aea1a8", "indicator--c3499bfd-176d-46ed-853e-5ba5c44e95c9", "indicator--4698c0e7-0d03-41f1-9dd6-a3be3bbda823", "indicator--976e545f-6703-4527-b955-338c29374cd1", "indicator--9a8f45b5-231a-4bac-a863-95d55bedfb3c", "indicator--5115a403-d882-4213-ae3e-bcff76887a7b", "indicator--9745bea0-da28-4033-bdf8-ab25126bebb8", "indicator--43d07cbc-2af3-4ec3-8ca6-8b89f737378a", "indicator--34cf22b6-f24f-4c2a-a42f-2f2bfce01acc", "indicator--52803cd0-1f99-42c0-8b10-e148fd7e50c7", "indicator--644bdf4b-7f2d-4d6a-adcf-c5d9ea082cd5", "indicator--ef82ff2a-ec6c-42a2-a0ca-8d5401770867", "indicator--2fa21e03-8fa0-4056-a7c7-bb17fc9249ff", "indicator--4aac8bec-e911-4947-ab00-c81acd6045dd", "indicator--a48b2659-ca1d-48f6-bf8a-2993789cd65f", "indicator--468ec3b9-33d3-48b9-bcd1-25b473c5f55a", "indicator--3d4e36f9-34ba-4995-a5e7-4526ec0fe40e", "indicator--84afb20d-ae92-419c-b34d-84f1c7d20193", "indicator--a4da5564-3adb-4f31-a36d-4b5968bdb923", "indicator--33862a22-418b-4f6b-9de9-e8388f454ae6", "indicator--8d433081-3e3e-4cb7-b2e2-07b3d711afd7", "indicator--d803a131-196d-4ea0-b869-c218960968a2", "indicator--ede9e4d1-714c-44e8-bafc-34df9c2e5da0", "indicator--a809eb44-bfe7-47d1-a619-d1bbaec0e3e6", "indicator--b0bbcbd7-37be-4655-8cd3-738ad9e939a3", "indicator--e01e0c83-3812-4b54-b88f-473150de39c1", "indicator--6b777384-7e2f-4e87-9c15-81ba6670378a", "indicator--42dc14ce-b752-43e7-ac44-942d044624e6", "indicator--eb3551d3-de12-41b0-b147-1b978ab0a79f", "indicator--f97c9a4b-7726-4702-9809-f074bb4105ea", "indicator--e5ee3b6c-9c38-4128-ab9a-ea226d5f4f93", "indicator--c69b418b-3293-414e-aa26-e95bc5fd81df", "indicator--d6e01134-86be-4720-afb5-29ef2b37a7a5", "indicator--849f2f1c-090c-4d62-9ccb-64d2bcc11fe3", "indicator--11c1f156-6327-4d1e-b67c-1f1019e92ee8", "indicator--08f93034-e7b1-4718-926e-fcd599940305", "indicator--c4ef918b-3a02-45e8-ba7c-f107c038660a", "indicator--f865ac2d-a88a-4524-99b6-59e5fe292402", "indicator--c314316a-f368-45c7-a39c-80d04fdd4afd", "indicator--99633fae-6335-43fd-9baf-eccb2011db8b", "indicator--cacce1ce-0c1f-488c-b1a9-e131bb359509", "indicator--f14a5098-1ea6-4c5f-8ac9-f1f6f3474473", "indicator--695baf08-5cf2-4205-b304-52a99a0f7295", "indicator--9f6bbd7d-ade8-4d25-9924-374339c2d7a1", "indicator--8386ab34-4b4c-4f33-9240-9ef0a7d71c02", "indicator--2b1b5822-89a8-49a7-8c66-023eff80e69f", "indicator--560a2fe6-a9fd-419b-9d9b-c711840b0303", "indicator--f1e1210d-23bb-438b-9167-de8be8fb67ce", "indicator--c7ea4f16-0c26-430b-bb71-4493924de1a4", "indicator--6501c43c-3dcc-4a25-9442-24c0791a9141", "indicator--bd4da2d2-093a-457d-a706-7a922d89601e", "indicator--2d42d5f2-682b-4d3d-b0ab-1dd1790cb4f3", "indicator--683d2a5d-9010-4f3a-a3ca-9ca85f00a427", "indicator--82cc9024-69ee-4b28-bf10-c425da2bf79c", "indicator--0af1aeb9-51e3-4d66-8423-8a36d73984f4", "indicator--9b9cb39f-94ba-4e08-baa4-5d6aa39e6a18", "indicator--4b6a1f69-13f6-4c25-a8c9-d28adeb0c78b", "indicator--3884337b-418d-4b61-bcd8-9b09ea906d78", "indicator--69d05a50-333a-433f-a4fc-a28b866adefb", "indicator--ab88fd4f-3483-482e-9808-b21e8105b5a6", "indicator--662172bc-64d8-47c6-ba6d-6f6162474082", "indicator--a3510506-825b-4224-beee-b540f3696e88", "indicator--7795b3e9-f289-4ed8-9029-957abaa25f6e", "indicator--2761b9a0-2ea2-41ee-8105-fa05b7c748df", "indicator--c32932f2-a7bf-48b5-9045-0c6053d3436a", "indicator--9a1bdd57-7d28-44ff-9466-7fb6d72b4459", "indicator--4ede1075-edb7-4026-aafb-9812dbf8f744", "indicator--9acb10c6-d245-4222-b8b4-639cb27d1538", "indicator--c6ee2278-b604-4404-933b-e776935d9b97", "indicator--3dd90c7b-48de-4675-8862-9895e83715fa", "indicator--af82787f-812d-42c4-9ca7-a748c4fceaab", "indicator--47f0890e-7f7e-4a9c-abe9-86b0892e3dbb", "indicator--2f9b0392-6e71-4c99-907d-7beb74f0a704", "indicator--f4b00ce1-cff1-4fda-b693-09281a695634", "indicator--2a707971-0e47-43b2-92d5-4ab8e353143b", "indicator--82d4d55b-082c-4404-99e0-aadbbc1073d0", "indicator--6938f791-0e2c-4ec8-8b5e-967b5e77e474", "indicator--ecd69717-46ed-4496-94ce-b6951320069c", "indicator--b9c28a18-b539-4639-b35a-007c3761273b", "indicator--3252c2f4-1f03-4ecc-8f97-04d9f25d2fac", "indicator--49e49e12-0b71-40c7-b237-bd049032cb7d", "indicator--f42c398d-50fc-4a3b-9837-5cd3b6667090", "indicator--4955efc7-b44a-4679-8b9d-3225a2b5bba4", "indicator--86597e97-a7c7-4a72-a1e2-a595e70ed07d", "indicator--d4f4f5ef-5446-4752-8341-60f3bab60049", "indicator--169feae9-3a9b-4167-9e1e-5cebca63a1e0", "indicator--bcbec4e9-95a5-47b4-aceb-e28ea23141b5", "indicator--2c9fcf6a-1bb5-4da9-9970-dac65a1dc10d", "indicator--ccf3e4ab-1832-47c2-b4f0-52e32fad1e4f", "indicator--98bb6790-ae13-41b8-864a-5957d35265c9", "indicator--a6df498c-52c2-41cc-b048-c10379a66f21", "indicator--4f0b2b8b-ba5b-4ec9-8d4a-bd2ed7b5efec", "indicator--2008317e-6d9a-4602-8582-c438e492df7b", "indicator--104da2c4-b9a9-4843-bba7-d7ee9ca91fb7", "indicator--0b1a6e73-b11c-4cb0-9def-9d71d333ba92", "indicator--77a1cfef-2a62-48ba-a6a6-7cdef2981de5", "indicator--b1f51daa-0c35-49f4-8961-bbcca4ac1643", "indicator--f0dee968-ad53-4999-bab4-134f0787123d", "indicator--1e2536ad-8adb-48a3-972d-677c0b7d981a", "indicator--d1fcbbf2-d141-43a2-8d9e-0ba017556f44", "indicator--4f2b47b8-cec1-42db-bd02-13326c1c4c70", "indicator--6b22fab5-1685-4b00-bff3-ae626b0144e7", "indicator--3b166d08-bd2b-424c-974d-c9be21e051a1", "indicator--feff2710-c69a-4f62-b58f-228b118ae8ef", "indicator--7d74e194-d792-4535-b5d1-fcbf27e553c7", "indicator--0ceef542-ac79-4636-864d-dfae47e92cd0", "indicator--0721479e-6d15-40e4-88e3-42720168401a", "indicator--3fcc193e-5623-42f3-8b2a-850f8f35b985", "indicator--92955fa6-d948-4d08-a7b9-479fdd3eeb06", "indicator--709609f5-7de8-48ca-8cb5-255348eb4368", "indicator--52712edf-ee7d-4e04-96b1-1d851233203a", "indicator--31348c9b-a59a-435b-862c-90cebf532f1f", "indicator--5f15cf5c-76be-41cb-9178-d4826b06258f", "indicator--22cab5b6-b2a6-4b82-9a1b-a002b1f7001b", "indicator--eb8e6596-d94c-4f11-8478-dcf688a1b948", "indicator--0aaedf74-42ee-4c2d-abb0-7c733d2438d7", "indicator--f73ed88f-73f0-4b5c-a3f1-e2c5f8a69f98", "indicator--3e0ec2f9-30bd-429e-a234-b72fa2c8fd93", "indicator--5cd7d65a-93de-4908-b621-e23eee05e9f0", "indicator--0460bdc9-8a2a-4b7f-88f9-6428f2ab7469", "indicator--f4ed1e28-12f5-4515-b503-ffb938b08f87", "indicator--25046890-773d-4292-bd36-490fbc626884", "indicator--84004db6-2372-4571-8264-87d27cf4eba2", "indicator--fca921ad-3bb3-4b8f-8856-75158923fefd", "indicator--2c415aa3-e329-4c72-858d-d87f97138003", "indicator--fbc8768d-62df-41ab-b71d-700ee71efdad", "indicator--ff75328c-dfcb-4546-8144-8948e001d658", "indicator--583f4766-79dd-4906-b38e-c3b25ddc84f5", "indicator--b832f11a-20de-493b-a38f-ba7b1aa0cd75", "indicator--4226466f-c7d3-4b5e-aecd-88e5edef6413", "indicator--e6b51a4a-cfb0-464a-b34f-2ef0b82026c7", "indicator--95222c8b-a6c3-4ad7-926a-809faf4a5203", "indicator--88c308d3-857d-47a5-ab2c-a567cb9508ac", "indicator--fb5ced87-ebad-452b-a89e-fa9ca007a847", "indicator--772ef12a-5842-4299-ae81-e4b868fc1a0c", "indicator--b8ec4dcf-2dd6-46ec-a2ec-9f4d7f1c58bc", "indicator--9f64c06a-de88-4f6d-afcb-e379b9a2e550", "indicator--382448ae-40ec-4983-8a16-7cc861e6482c", "indicator--af16a370-ccc7-4bb1-bc87-a82aae0bfd4a", "indicator--405b75bc-3ef3-436f-99c6-5b6e1ab90d83", "indicator--9608d627-fd91-47b1-9ef2-81fcd1cc95ce", "indicator--e8e603e7-7528-4046-a92f-85ce4df2f581", "indicator--5eb2e97d-e33a-451b-a1ae-daae63d178ca", "indicator--f224d86d-2da8-4551-a229-f1f9db4377d6", "indicator--78a3974f-be0e-435a-a5cf-91182e8e4afe", "indicator--197fba02-1025-49aa-9aff-3f1bc3bcfcfd", "indicator--b7f66fa0-99fa-40dd-b78e-a6e7da7c01c1", "indicator--3c2d5618-7612-47f8-a9c8-9e1fb17bf77d", "indicator--12ef50dc-6ec6-44eb-9564-8f3f475ea0a3", "indicator--214cc228-2268-4ab0-b01c-1232936d495f", "indicator--a0885b24-227f-476f-ae63-71cee1b5f818", "indicator--33489dbe-ec75-460f-8785-04a9a7873919", "indicator--c1d5160c-1149-4255-a0b0-bb1cf5c3572e", "indicator--8e82a759-4bdb-4374-884c-7fa90df0dd6a", "indicator--de055f4a-0949-4bef-83d6-fe7a6b8005dd", "indicator--3c81d103-3193-4e67-89ba-b45933d4a13c", "indicator--60c4f535-60b8-4975-be44-821d213cf807", "indicator--741379a9-9a50-4fa1-a711-e76848bd617f", "indicator--46848110-9feb-4a2d-b18e-f9cd5f9eb9da", "indicator--4814627b-8e57-471b-8351-f33521dd5bdf", "indicator--3fbdee64-dd80-4c7b-bd30-5558aba17e90", "indicator--850f77aa-865c-434a-8058-a883154e5b5e", "indicator--4e22cf49-f020-471f-90a1-cfb98e5854e6", "indicator--8ddbf40f-b9b2-4484-becf-1f5ea389597d", "indicator--fbeb1b14-65ba-42c6-b708-4ba5728467a7", "indicator--91aa4665-a02f-4bb7-a50d-e366f91a39ae", "indicator--ef008cac-2cd0-49e0-be72-66e843335071", "indicator--fa370959-4d51-4d39-a1e6-7aa974fa6578", "indicator--7c24f07f-25ac-4290-8eaa-dc7ee6060fd3", "indicator--c73865b4-d0a3-4ff1-b4a8-7d00011da423", "indicator--8a5c8cd0-0a32-41b2-baeb-ecd3773ba308", "indicator--3d68317c-9e89-4959-9492-0dff1c414694", "indicator--4d09660d-1ea6-4add-af6d-23af07838878", "indicator--76c7c776-ac7a-4790-a51b-55825858349e", "indicator--8ca98329-6bd5-4f20-b728-2ab66bdabca9", "indicator--625bd2c7-be63-4031-9355-14260fdc1b65", "indicator--cd26897b-3767-4326-95a7-d21376aa0389", "indicator--f51f28ea-63d6-46c7-b8e4-6c88c4ef41de", "indicator--db66d273-8963-4f1e-acd7-29a7ad3dd51e", "indicator--c2585510-dee3-46ed-9f05-df9d323a48a4", "indicator--e9ca1d13-2383-42ff-937f-f9d3c1f45a38", "indicator--11d31a0e-7c5a-49e4-9a2c-def267684fa1", "indicator--4aef7e40-beff-43e9-a951-8cfa611b0708", "indicator--e85c125d-15ae-4d0f-a0be-425fb5b35f03", "indicator--44116b5d-10e1-40e2-8e71-03bc17a51433", "indicator--153b43a3-7842-4ae6-82a2-f27d4e7cc60f", "indicator--5817e764-c204-434f-a543-d453ec2082fe", "indicator--6b24b164-dcd2-4134-a8e3-8e57b657abbc", "indicator--3090b34e-1d5f-48de-9df5-f14cf0256442", "indicator--ca0d7ecc-2fec-48d9-bf62-fec21dbe7602", "indicator--7ef2f6f0-e7ad-4a91-b9c5-c57dc53cbf5f", "indicator--57b40117-cf09-469b-974f-08c1ceed017e", "indicator--9bdd5c56-5d22-429e-a808-ed75f2852c1c", "indicator--c1c00109-46a3-4b80-aaae-ca395e41af73", "indicator--0738496e-a8f2-41ed-8cf3-b0a0ce3f138e", "indicator--308a0100-e381-40ff-8583-5946bbb4fc34", "indicator--674efc2a-cb47-4b62-83d7-8f272a9b3360", "indicator--fe9300dd-f8ae-4bd5-b127-abbbf53bc0b3", "indicator--2ddb13b6-a9fb-4f4f-8fcc-28e69b0da511", "indicator--8f7a0474-daf9-48d4-a16e-9fff0430058a", "indicator--c435adc6-1e90-433b-b64b-f622bb61e7b6", "indicator--d548c1d3-f699-4802-bc88-ce5d26842556", "indicator--ff5bb9a7-dad5-4535-9dcd-14682daa8ce3", "indicator--23461be3-a0fd-4a6f-b203-84897c54a3bf", "indicator--95d5a1be-abfa-424b-ae66-5e3d4ddbe778", "indicator--6788713c-e6ee-45fa-a41d-5568341a2166", "indicator--68afd70d-46d3-43d9-b153-6a4fe796ea89", "indicator--aea1a631-6b4b-4e0c-a290-9ad92835f38f", "indicator--a457bc81-ef2b-4cde-a332-159fa22a12cc", "indicator--07f00b4f-2896-4ce2-a9f2-5f5da7f15e4d", "indicator--43d73cd6-fc34-4cd7-b8ec-ba8118103dd6", "indicator--8df68460-dc4f-4290-8d29-e289709cbcf1", "indicator--f28e96c9-5d48-4495-9219-50444f95968f", "indicator--a4956146-79a3-4aa9-9cf8-3b91532d5eee", "indicator--96534c34-e18c-4344-99a3-fcb5986b5108", "indicator--865a7b5d-f2a5-451a-a11b-59a6b0f4b9b5", "indicator--b1598500-c2c6-45c5-9cee-e8192c1290a1", "indicator--1a8fcdbf-ccd2-49d6-a8b6-cf698b36abdc", "indicator--7ea7b5a5-4c5e-4237-af8c-e9ba110f7e95", "indicator--91ffe27b-1da2-4bdc-9a58-43210dfc606b", "indicator--637751cc-e22f-4103-b362-32dae31a1052", "indicator--2529e769-cad9-49c3-bb29-746944f53a6a", "indicator--23a503e6-9c94-40f3-abe6-ab61b0351c28", "indicator--d321d5c7-d952-45b7-a7f2-b8cf3c6e79f6", "indicator--7480e0ba-41ce-4408-aa57-4dc826c6b6fa", "indicator--3b1ad241-14d7-42fa-b370-4d6200f30e9b", "indicator--63387877-1bf0-41c9-b4c1-f779b8fe7498", "indicator--3f8d8236-6961-4d61-b6c0-6a2f0bf634de", "indicator--9883eced-66a4-4592-9a98-8fca5e4e64f3", "indicator--6b0574d2-4f61-488a-936b-1e9daf3a7108", "indicator--1b3c9723-dacc-4d5b-bed0-7282bb9ae278", "indicator--a8f836a6-8feb-4936-8f71-edf33650274b", "indicator--905ec608-37e3-4eee-83c5-2c489f112c4e", "indicator--e6dae36a-5e55-48d1-a078-c9599b27e695", "indicator--6a6078b7-f4bb-4066-97e3-a5fc694c24c8", "indicator--833613e3-efc9-4cb6-b009-191a5ecbce80", "indicator--06a60a59-87db-4ee3-ba91-6bb9f3a19acc", "indicator--15672c03-c131-447f-ac39-710f2add82e7", "indicator--268e4141-166e-4d15-97c9-c208b50680f5", "indicator--972b09a3-11fa-4e79-ac6b-09c3e884692b", "indicator--c2b2152c-66d6-4de9-9efe-085aa71c41d3", "indicator--aea8c44f-edb0-4490-aa5d-522c3088d93c", "indicator--4d8f4840-9a69-4f77-94b4-51e8cdd84cf2", "indicator--636a3164-5c44-4a1c-bc22-10c9b9cf995d", "indicator--64df3e67-3582-4dea-aa83-34aeacec36a0", "indicator--43228603-bb11-4a9d-94e1-751bb3989a3b", "indicator--65661c6a-558f-4e6a-aa8e-e4b4335f70b8", "indicator--c5b00c49-98cb-4a96-ab87-183930a78844", "indicator--4b8130aa-00d0-42f3-85cf-31fcb4f29856", "indicator--d4651424-da32-4dae-bc0d-01899236eaa4", "indicator--86729f2a-58b3-44ed-8683-1fc86ce0f791", "indicator--a1ef98f8-9183-4a15-ac68-68776746312d", "indicator--510e6037-b44e-4cca-8ae8-d83f7c6099a0", "indicator--998a471e-9778-45bd-bf85-c53f326ebea2", "indicator--230c96f1-4beb-4e8f-8018-aaeaa728bcaa", "indicator--0b88dcf5-5e4d-489c-900e-db50b7f82cd7", "indicator--c1a57320-7c9e-474d-a50e-afd0b6869967", "indicator--64178900-7a6b-4f13-8e22-e2ab41effe49", "indicator--6feece42-0fb6-425b-9b82-433da8cd4c61", "indicator--5ed8e366-6bb3-455c-8e52-d20453b675d2", "indicator--a7e92b1a-2001-4426-8ee7-a60eeaeaf25b", "indicator--81114430-d29d-41be-8203-ce154e60a7bf", "indicator--ee7d1d83-1640-4e9b-a50b-a29ae6614385", "indicator--4445059f-1f75-4454-87f4-36b840c1b581", "indicator--45296307-b3e4-46ae-bee7-9808ccfc968e", "indicator--79ac338b-b909-419f-a60d-6dd065537257", "indicator--7ae568c9-3a77-46e5-9b16-a4d57b88fd14", "indicator--e26087b2-bfa8-46e5-98a4-b2724340ba26", "indicator--9caee285-64a6-4476-9d08-de54436544eb", "indicator--74fe1587-2504-47eb-8d5a-14f227f5446f", "indicator--761491a8-f85e-4f0c-a861-9d24ebbf89bc", "indicator--dcb627c4-91ef-4001-8b52-204f1b722f84", "indicator--e4efe5d8-d46b-4bb0-9ee2-697228afc076", "indicator--d5e57725-5ca5-4ac2-af20-eb6589450ee2", "indicator--03a581f6-5aa1-4a0a-bfe1-79d64f59f35b", "indicator--ee96acb9-efe7-4cb5-960e-fb86335f8433", "indicator--7f232a51-6a70-4e53-a3b5-f1113255c3de", "indicator--c5fcd886-5fcc-47e1-9ebc-70b67923bf36", "indicator--48edcf5c-239f-4a78-adda-69ef2989b1db", "indicator--a3074d1e-a667-4577-9a24-d235b7178d90", "indicator--e4f3cbee-9488-4d48-a34c-9942e3ba5318", "indicator--698514a4-391a-4ee6-b64e-6867d31490e1", "indicator--f33f77d7-11c9-428c-b8dd-9418b95b1d83", "indicator--2555264e-a520-4bb8-90d8-af3cc93a97d0", "indicator--80437542-3bb9-4f9d-ab4e-99177ae37637", "indicator--74546233-7d71-4154-9dc6-cc2681f826a7", "indicator--83d01861-92f9-49b1-b4ff-31c863f2476e", "indicator--39c9b27c-f7c1-4030-a3cd-38e6a7f618ac", "indicator--c8d4f182-a77e-4e4f-a895-49ac391eb1ef", "indicator--b82c88e5-ae98-4c1c-985c-67d0c2fc92c8", "indicator--0fdf1f84-1c30-49dc-a5b1-d8b09227c75c", "indicator--fe55c01f-a6fc-4776-9ce7-e4bd6dd7af36", "indicator--3d23706a-ab39-4553-bf8e-90b6a5437181", "indicator--57079cee-91d7-4218-8f1f-8c56098739c7", "indicator--d8bc00c8-d863-4194-8841-d4b35f2c7064", "indicator--1f7ede21-dc21-45a0-b8ed-143d3fb0694a", "indicator--f65e1c58-40df-47f5-912c-92db340b9ef0", "indicator--b164a227-42b7-4512-b817-5890e29911d2", "indicator--7e5e864c-43bc-4d50-bb7d-6a46dae271aa", "indicator--5dc15d36-5af2-4202-86d9-fe0086790305", "indicator--b851dad0-bf69-4c2a-a047-776cd4bd4986", "indicator--28c841e9-b13e-4fd5-9f7d-8fd82ad95151", "indicator--0d0e4a84-d337-46e5-ab36-8e97da7a4b55", "indicator--d4179cd2-0ae9-4dff-939c-81979a2ff158", "indicator--7aaa21d0-bbde-4c50-ba02-5cb74da012b5", "indicator--330fdcc4-3f9f-4ea7-b0d4-bace2d0da880", "indicator--a95b905a-469d-47f6-872e-ae66524209f9", "indicator--dc86b04a-d876-4802-b1da-71b7475e0f5a", "indicator--bc60ca50-05f0-48c0-baf1-033caf1cf808", "indicator--cce2e1ad-4e3b-4444-a336-03ea3fdf2e88", "indicator--220fe927-92bf-47af-8c9d-6523ea2260df", "indicator--3485f62b-ed7c-4c57-a98d-e58558f2ce5d", "indicator--96eb2b35-8777-4565-8b7c-dc4c387c4315", "indicator--0b9f9f6d-be2c-4d2d-a104-808db5f1bae7", "indicator--436ab37d-dfd0-4bcd-afa0-d0fbb1f55659", "indicator--a327f4dc-95b1-4eb7-839a-8d9acbed8ce9", "indicator--8574da63-fdd6-458d-9fdb-4903846d1b52", "indicator--da93b3f2-d775-42c3-926b-6759573a415c", "indicator--d15f9490-5447-4e73-9120-5071a2fb1566", "indicator--d4c368b6-e56d-451c-8767-1537397d2e1b", "indicator--7d3ec099-11c9-4547-ba87-15c93f08dafd", "indicator--6359ec0d-042c-4d4b-9355-7fa7fe526d34", "indicator--ebc98246-334e-4a04-a62c-dbc0e363ae19", "indicator--c91489e0-d501-498f-b38f-03cb1c783e07", "indicator--5442aa8a-cf7d-4b54-af4a-85cfd5020a3d", "indicator--ef4de0c6-abcc-47eb-8f87-cd968bb8b0b8", "indicator--7718f5ca-0f47-4e79-bd5b-7fb010441b37", "indicator--15d15d6b-1bc7-4194-abef-ad3bc97d3ffd", "indicator--62ed445a-5da7-4d37-b05a-815261f42a60", "indicator--2ec16b0e-ce0c-4779-b2a9-0f7b117dc260", "indicator--61424948-ac2f-47c0-a8d5-dd5423034295", "indicator--e202daeb-9deb-4912-9996-6869a25b382a", "indicator--d925d38b-d8a9-4cc5-8c0b-28d4ffd16a14", "indicator--dc224765-84ca-4808-bccb-0d4a6c540f38", "indicator--bd97c04f-b02c-457b-bd0d-27e1eb7d2f6b", "indicator--10dae935-dcf2-4f01-99a1-036bcdb32b8a", "indicator--a06e25da-12ae-44b4-9570-2b89aa5e0b78", "indicator--93fc69cf-bf6c-4dba-a38a-d7457747fc5c", "indicator--3127303f-13a0-4109-af68-b6ec69e5f738", "indicator--91c19ee8-0d07-4b61-b9cb-4b5bc6278147", "indicator--c8c698e1-c6d0-461e-8f70-ded120ff0220", "indicator--a5d3bb38-cc02-41fa-980d-aaa9cddbffdd", "indicator--fbe7eb2f-4d7a-4685-8eff-f7643482a8e0", "indicator--c0edd570-6b8a-4290-9926-d3c0abadb0ac", "indicator--08748795-46c6-4adc-bdbf-911710f87303", "indicator--5b36c42b-7a3c-4dba-bbc1-d773c7fe0abb", "indicator--afd40cfb-cf8a-4e52-aeb4-f7309c5df796", "indicator--ed3b30f3-0523-493f-9857-d0dd233bb982", "indicator--94a9bc91-7b4f-4c5f-8ef5-d82c1f8962d8", "indicator--258f610c-77e5-4af1-a7a0-15a8906cfa32", "indicator--e9fc777f-a11e-45f2-8159-a7c759ab4c54", "indicator--ff781bef-63eb-4e97-9397-8543dca1d6b2", "indicator--83104c29-dc0e-464b-a671-030e574ba574", "indicator--391c5917-6b23-4669-b00d-c8ebe8066021", "indicator--88bce2fc-0216-41ea-bd7a-cd440a9b1ba4", "indicator--3fbcd2bb-556c-42b5-a29a-faf7bca9c3d1", "indicator--51da104b-b897-4776-a314-093a5058ce36", "indicator--a477e994-e04c-4b17-8247-241d29b29f29", "indicator--b2f713ae-d935-4f9b-bc4f-93a99934cf3b", "indicator--7e95f917-c9f3-4df0-b879-fb01553c2b47", "indicator--c4ca99cb-25e5-4c97-be77-b8051e2c1eed", "indicator--97469731-e07d-4ae3-a8cc-c65bb158386b", "indicator--156a6675-c439-42c1-9b36-ce2207773698", "indicator--546056b7-e019-400a-8025-fe0a81a2430e", "indicator--f1576426-4cec-48e4-a4ba-0b4aee55f4cc", "indicator--fe770c71-4964-4935-8582-c4fa789a32a9", "indicator--8cab4e85-05e1-4ecf-ae03-e95684b2e38b", "indicator--5e8e0ced-3e90-46db-8c6d-607f48e440b5", "indicator--bc491147-1aba-44f6-af9d-1dfaa83ef296", "indicator--2158eab7-6d1e-4f38-ba75-b2d2c619048b", "indicator--33fa74e6-35e4-4d47-ac63-cc8cc0a1d162", "indicator--6c950036-a851-45e9-8443-744b9b3886be", "indicator--5d4d450f-53fc-49e2-958a-37bc440c266f", "indicator--01a4181f-b857-4732-8e8b-1ed218064a15", "indicator--fd59c790-7d34-40be-832c-08f6ab0129dc", "indicator--13cce6cd-9722-4339-8fff-98164a15a564", "indicator--8dc61e28-413d-4588-bfb0-79687a03f0c2", "indicator--6b5184c0-dd0f-4b93-8cbf-859d2636b733", "indicator--d20144ea-1743-467e-819a-a3024aa4cc27", "indicator--b1a9a30b-6c68-4e6e-9dc7-4e2b2a59c0b8", "indicator--99692f5a-1417-4e8e-a241-08549b68e536", "indicator--e89611d6-0130-4421-85f5-e5b770c7372c", "indicator--4d550cf0-83d1-45bd-8c86-e51b5015a296", "indicator--b2457ea4-83ca-4bd3-852f-63653426af15", "indicator--09bd4a26-cf8d-4d20-9f64-f8de5c953963", "indicator--42bb87b4-b243-4299-8657-b22bb9263b6b", "indicator--8e6eb048-ec43-4204-89fb-8eaffb8f8f48", "indicator--97cf251d-908d-4702-a440-69e69bf7f421", "indicator--913ef852-9130-4ead-85fe-d484f829a14d", "indicator--417e2db5-eb72-4c26-a64a-caeb4f6a1fa1", "indicator--e0612bc8-6621-4b58-9981-0c0244e37dce", "indicator--f12c8e8f-90b4-4764-8ceb-ef0877fb92cd", "indicator--b5d02225-666d-422a-8825-3e277424f40a", "indicator--c455b590-3278-46b5-8414-35cdbac1a43c", "indicator--a5caed11-23db-4d80-bb7a-837702dc0ff4", "indicator--b6f650fb-af6a-4754-a895-de85c8e09019", "indicator--56535421-0870-4d97-ac33-759c3494b589", "indicator--d47232f6-9443-4bd9-afec-34cc3ca1750b", "indicator--4ba92b56-36ae-415e-892c-50fe1d2853fb", "indicator--7dcdf89c-7b1d-44ab-971d-133aad30b23e", "indicator--4e70883c-7ca7-4a10-86f2-1788c02210fc", "indicator--ef1a3783-c98c-4ce8-97a8-c8c7378225f9", "indicator--f3ad39bb-ee0c-45b1-803f-42c9df4b8841", "indicator--1f9a8f91-1eae-40a9-b770-35a79a0bc5a4", "indicator--d50871e8-d612-4397-8bf3-a37339797608", "indicator--44b6f0ed-dcb0-4876-96a8-21fcb547cfa5", "indicator--596662ee-5b62-477c-86c7-481303e334bb", "indicator--88fd6c68-dcad-4b76-baf2-d4f5b40e3659", "indicator--56a43d6f-6002-4ff1-8ffa-a427abe36ecd", "indicator--8c0498e6-02c8-4388-b43c-225c3f436ddb", "indicator--88c5bb4d-dd79-468d-a709-261f3cc0110a", "indicator--71764eef-27f5-400e-b8b6-a0554c33cc4e", "indicator--76903b97-beb7-4631-95b9-4b80c7c7f929", "indicator--893ee4a1-577b-4244-8d62-078b828e3559", "indicator--840abb17-b4ad-4602-b1aa-00c36c3d7c13", "indicator--549822e6-cef0-40e7-a845-d8309de2201c", "indicator--d3ec1dc0-86a2-417c-8818-2605ecaa1daf", "indicator--798865e4-c081-4f36-a51c-15dc6577605d", "indicator--8a79345d-34d6-493e-8d63-2ac8023c2c20", "indicator--1fb8845f-8476-44e1-972c-669ca2a55240", "indicator--c3f7782f-6876-4ccd-ad6c-95724614fa26", "indicator--08fb7e08-156b-420c-b7e5-25797a3e89a4", "indicator--f5200f25-52dc-469b-b426-bae3eef349b1", "indicator--390408ab-1101-42dd-bbb2-b72fc0144599", "indicator--86ffdbcf-b45b-404b-8adc-2483306f9af0", "indicator--189a6b4b-f1ef-4f6f-a21a-e3c8dbc71ccf", "indicator--e400dd95-936e-451b-9c4d-dc7caf8095e7", "indicator--d0e4e6d6-ceeb-4eae-9f8f-18bed5bd86c5", "indicator--72c0f31a-fbf3-4c4d-8a00-9c292a06176e", "indicator--05b153eb-eec6-40d9-bca2-02d8a90d0f00", "indicator--7879d0c9-dc4f-4396-a46f-aee7cb6b75dd", "indicator--67d8fb61-3e69-4890-89c1-612aeda97d57", "indicator--60c57dc9-f7ef-4574-961b-428737d33033", "indicator--6ac1d1af-ce84-42cf-b4e2-1aa3612e1a67", "indicator--9196e70a-a3d2-4cd9-8025-b4f925bebfce", "indicator--d2f92b45-5bba-4e5e-90a8-6e9fc4571fb5", "indicator--abfebc20-fb98-4f18-ab30-fc5debd0d15e", "indicator--7f8edf97-3e38-4c6e-851b-c532ff109be8", "indicator--5bd8c4c2-6235-45d7-bdbd-c9adc6074ce4", "indicator--e9c79343-2f3f-4561-b973-4bf191d207ff", "indicator--c4ced231-c899-4dce-9e68-605747e2a909", "indicator--21058c7b-a7bd-4bd8-a6d7-5d649b43046b", "indicator--0e6397aa-97a7-4fbc-8772-a79b3723fdcc", "indicator--af5ffe62-891b-4741-89e2-356fb33b9ad0", "indicator--a0e013cd-d643-4218-8598-f4c898b423b2", "indicator--9a548358-d44e-44b8-a162-e5f1ce534b53", "indicator--a137725b-e9a4-43a0-bafc-945c346aab88", "indicator--df7ad649-6056-4b08-9386-ba3128cb2b64", "indicator--0c340e0f-7cec-49e6-ba60-b2be7459bc04", "indicator--fdb49315-77c3-42de-bfd3-e40d2c7631c4", "indicator--01b9c8b7-2708-4d3d-b95e-0b9a96c26585", "indicator--ff5f2dca-3cdb-4bfa-98dd-eb157f8b9a3a", "indicator--b775f99c-d772-4f84-b29d-6cd96e747e60", "indicator--d39cc06d-4197-4278-8269-fd4869a438b4", "indicator--15e87c58-facc-4f06-a5d5-a80f1556f12f", "indicator--224c2aac-32d6-49d7-8c88-5d27a253c3c9", "indicator--0cb9795c-0668-42e1-b08c-208a788dbe01", "indicator--f3fe2d18-ee16-4fcc-a8b0-9927b6b1249c", "indicator--b6264fe6-6da4-45e5-b993-0aa00f952690", "indicator--ed194aff-11dd-45df-bfc8-634c5813653c", "indicator--c892469f-12e7-495b-8c66-b9be72da2cab", "indicator--05a4c78d-9df6-4139-850c-53773b5d7f33", "indicator--46b81ea6-ca8e-44e0-bc22-daa57c47e92a", "indicator--b6804623-7608-4a4d-b0ed-842fa7f0a137", "indicator--7848189f-b01a-4986-b589-6d67a0e78f78", "indicator--473e7b09-1cf9-45dd-9d4a-f30d78863afb", "indicator--bf8e6091-5c59-4604-8215-5778224c8f7f", "indicator--c35c3541-92cc-4f9a-ac72-5065cad08da0", "indicator--a6cbad22-808a-43b2-89fb-ba57a5487cac", "indicator--a05f355d-d403-41bc-b183-ab6d8112787b", "indicator--c7ee3149-cef8-4c2a-ba72-4b9427caf84b", "indicator--69fdd51b-45e2-47ae-978d-b9c9c054b6b5", "indicator--6a7b179f-5b02-4f97-9017-a9840d61c092", "indicator--19a2234d-9c29-4fdc-acef-1535cef2b04a", "indicator--ae7a06e1-6b82-4311-8f8d-b187719a5af8", "indicator--e96160ed-5b85-4f1f-8cf3-1a54ee5e313b", "indicator--8535bb9a-6533-4aa7-9e14-215e11160677", "indicator--8740e587-99ad-4ab4-a8a4-a3e416795af4", "indicator--bb3e0c3c-136a-4be4-bd5d-3b244f62f6ff", "indicator--b118d87b-5cee-4519-825d-6d9044e1c285", "indicator--8cfed0e8-af63-4505-9e02-d480aace9f68", "indicator--f3920d6e-2c82-4969-a1a8-8d37d4c3391b", "indicator--fbffb555-1941-49a4-94fb-746e0ef9ec94", "indicator--b415952c-7687-4a6b-8be2-cbd023ebd74b", "indicator--45fb1c1e-e161-4dd5-829f-6a9f6aa71e62", "indicator--e89bfbc4-77f1-47de-896a-cc80c0150f5d", "indicator--7d05390d-08ba-4c7c-8997-34a2f9f49516", "indicator--b4288b08-ebde-4b84-90a1-390a686e97d0", "indicator--3f8f518c-cbea-4c28-9d87-026fd8f0c0ca", "indicator--656891c1-90dd-4ca9-9a6c-a41745d89e38", "indicator--6da5e6c1-1a59-4de8-b7ef-249b9e63d9e1", "indicator--48c0a363-7978-445e-9a81-d57b9d476f24", "indicator--bfc5e8a1-e008-4216-95f6-57ce8141c467", "indicator--adb94b3b-8dd1-4807-96f7-4d94f291c1cc", "indicator--ce5c5300-d283-4e1a-97ba-bf730ff7b846", "indicator--c316ecd2-6209-4a6b-99f8-973ca337501b", "indicator--4487cd2e-5d2a-4247-9f48-fd0f32c758f1", "indicator--b42dd7c6-bd5e-4bc7-bb41-be339a7b6a94", "indicator--36bf4a4b-e1b5-4f40-9348-abea320fa9ef", "indicator--d41b7b13-9429-4c06-a556-de4673623925", "indicator--c7fe5f5a-c9d2-49b9-a0d1-4c278c7400b3", "indicator--8229c899-78cb-4aa0-9877-4e50372d72dd", "indicator--90cca22b-40d6-4b25-9a29-e5dbaab4318e", "indicator--d6c5bf50-d584-41ef-8ef2-555d57301d33", "indicator--8e9c35be-c31d-4079-b5f6-2d49f206e10d", "indicator--daec7430-efbe-4d40-b076-dfd1275906e2", "indicator--e2164004-9eff-46d1-9622-36011cf9911a", "indicator--a290778e-9e22-4582-ac41-a9f54e9d0b6b", "indicator--161331cd-524c-4bba-a51c-29814e8a9b9c", "indicator--623008c4-5a17-43e1-be94-4cbacf255c34", "indicator--1e6e5240-1033-437e-a41b-1a983a411589", "indicator--be0f183c-292a-4dea-bb3f-dc1a1450b5e6", "indicator--657057bc-4a56-49c7-a5cb-b8faca856fa5", "indicator--41f6d07c-9bb0-4558-b3cf-c143516e44de", "indicator--ba9b990b-fffa-4e0c-8184-2482f9abcbec", "indicator--538ba727-26d0-4055-925c-14de0da0df80", "indicator--e48416f9-2213-4311-8d99-ef0b7fcf2526", "indicator--345b4eb9-dad0-4545-b1a6-9b750aaffe8e", "indicator--179e9db4-95f5-4cab-bb39-b8c34a1cb3a1", "indicator--5d15dfbe-29ab-4c86-bd49-9638603b35c4", "indicator--ee6c2497-adef-40ef-9363-c6d2c65ef1bc", "indicator--748febcf-2f33-4790-add2-272d713e035e", "indicator--854506d7-eda3-40fd-b817-7f297bbb986d", "indicator--64f541e1-4114-45cc-a01f-fd66b5dcf1c5", "indicator--5fbfb24d-0e51-46f4-b216-bd245e761ff7", "indicator--b671922a-2808-4fd0-bc09-1a57cdac7e84", "indicator--0a4d5796-8418-443d-b9a4-df4edb563c8b", "indicator--5f3bb3f2-3b49-475c-843a-c1cf7316b81d", "indicator--482eab46-fd94-46d8-81d1-fc4f771ca655", "indicator--9841a264-f084-4132-9456-e1939ecb54c8", "indicator--2ffba22f-6e92-48e6-af52-c9ef3e491b0a", "indicator--7583ee11-6bd9-4e43-90e9-d06af22dfe94", "indicator--ed69cf5b-969c-4454-a456-f0da63bff53d", "indicator--088c61e5-4bfe-4ed9-a2c7-f271ca2da29a", "indicator--81747e15-a351-417d-a305-084df7d39251", "indicator--d403bcc7-3e43-4e63-9ec1-eb02bfa2b607", "indicator--4c994c65-aee7-4c0f-81e6-ebc1170882dc", "indicator--302c459e-18b5-4c95-aa36-21b80e863ce9", "indicator--4b535c24-7d58-434c-8284-788b6835dd75", "indicator--71b911d8-4f53-4a79-b802-dd4539d52800", "indicator--de2c66b8-82d6-458b-97c4-52b65c175e88", "indicator--04c0f7fd-7790-42a9-9602-74db04160cd5", "indicator--1399bca6-9920-47b1-a02d-7330aab6ac9e", "indicator--2c170e7a-fe1a-4090-9ed6-d42c2f0c1fbe", "indicator--fe84ee15-8325-4f73-9c8a-ff055f81b48b", "indicator--f6c04bb7-25fe-47b7-82a0-aa3c119df395", "indicator--6567b55e-80a6-4a8b-bf13-b0543b2813be", "indicator--5929dab2-dd05-42aa-b5cd-c0aaeb464982", "indicator--0f107507-9782-43da-8c75-5d2ea9a39c5c", "indicator--b14ac01c-60b2-48cb-845a-9614c5f35d9c", "indicator--8e7776ef-ed84-4763-9971-6cbc6777ea99", "indicator--24264ce8-2516-47d5-909c-4208e6b7c8a4", "indicator--445672ce-c1f1-4100-8751-bcec5b1866b1", "indicator--87bb122b-0e7c-4d0f-a226-379f5116b3cd", "indicator--db33026f-cbb9-4015-a2cd-0aa2bc5c30fa", "indicator--e2cc9af7-6277-43b5-9d15-a8e6280a4970", "indicator--bb191e64-d2e6-47ee-b715-970783709f0c", "indicator--2c8723e9-c563-402c-9c94-9fd53e84bab8", "indicator--039b99bd-6df5-4f21-9b75-2b0028c6fc2c", "indicator--6c3d193f-71d3-4d03-ad13-7d2923a824b5", "indicator--d2a1391a-cd59-4e1f-8049-d562f0932d96", "indicator--7569e39a-b549-4073-853c-cd6575974aa1", "indicator--12534dec-25dd-4b3c-acf7-e61ab7a80f36", "indicator--ce49809d-960a-4e0e-918f-0c861cfa51e1", "indicator--61353250-5c0d-42ee-972d-1d2156aaed71", "indicator--074c39c0-c311-4637-9e31-d5845f285b4f", "indicator--87a75770-69d5-4949-a30b-a246c73648dd", "indicator--c5fbfc26-e053-409e-a6ca-e9d020712246", "indicator--0fa5f3f9-dcc0-4262-be2b-7d1f1e9199dd", "indicator--edb83053-9989-4179-92f9-6003b45a29ba", "indicator--7a4f76aa-ea26-440a-a865-afeb7a5607ab", "indicator--731f111a-e5ba-483a-82b0-51a23649172f", "indicator--869d6a7e-8d12-4a12-858a-32410be4377d", "indicator--87621c95-a497-4e1d-9c40-38a5fccaf3dc", "indicator--a9c87323-85de-4f65-8552-c984ccb7eec4", "indicator--241ccc6c-e7d3-4c0c-8ef1-b50226dc57de", "indicator--1a37a80b-8aa9-4012-9428-90e59925b0ec", "indicator--1c3cda71-6f8d-49f5-98f9-6c2783184391", "indicator--7f6d7918-7f71-4d61-a56e-b1cec675430a", "indicator--9b440677-4a46-4fbb-89c6-f537a6a35ccc", "indicator--104dcccd-3610-4851-9aeb-b21c7aae5852", "indicator--84266f87-746a-4572-8e95-7901ec275385", "indicator--f825336f-25ba-4cf6-8dd4-b6d1e8bc5848", "indicator--82450243-c760-4bd6-a19e-2edef9454278", "indicator--c3169e01-2f78-4929-9851-c8ef6f06627e", "indicator--7e23288f-026a-4bd1-aa0e-091a5229235b", "indicator--16eaadfc-e63c-4d87-8bd4-b67df10d8c2b", "indicator--d8b387dd-4f0c-4d0f-8f59-ca4e3819004c", "indicator--2da40959-8aef-4171-879b-ca68d76bd534", "indicator--dd2476d0-105b-4faa-ac23-927a35db9c28", "indicator--e9baaeb3-eae3-4509-8cbf-d69ffc1bf3d8", "indicator--4825db97-8e80-48ec-82dd-35572ae8034a", "indicator--64645d29-aded-409a-94e8-ba64f7b11611", "indicator--6119ac00-5744-4acb-9eb3-80bcf50b852f", "indicator--8bc9a65a-9d38-4af0-95f1-2ed1d0c17388", "indicator--50c2e58d-c8b0-426a-adf5-7878ae1caeaf", "indicator--02715822-8674-4dd3-a36c-095994f331d9", "indicator--8fb71bb6-9671-4a17-b352-7358ee8cd79f", "indicator--89ab7401-f306-42a7-8afb-99310909ae5e", "indicator--b924471c-b061-440d-abf6-cfd86f60f10d", "indicator--b66bc1f3-e9d7-464b-91ab-b560111f6565", "indicator--52ec8500-74b1-4795-b0b8-d1812012483f", "indicator--6b8e79fb-8ebc-480d-b741-79c915d6873a", "indicator--2e16059e-bd83-44f8-963f-0725b184bab9", "indicator--4ccf1592-9d3b-45ce-92f2-76db961370fe", "indicator--364fbcbd-a18d-439f-90b6-de510f646eef", "indicator--cbca6d95-7fe9-41d4-8eb6-d9132a8a767b", "indicator--f6c0795d-508f-489e-8c85-7a1ead9b8016", "indicator--7b1bbcfb-dbae-41ab-8ab1-bc22a50359e6", "indicator--b2e437cf-9051-4574-8ee9-6015bc7e593b", "indicator--ca442de7-c910-4749-aa10-e76669b6c1aa", "indicator--e70d0d9d-3746-444f-9873-95d9c9371dc0", "indicator--76dc0eb9-7f0a-4010-94fa-cf1be5b43328", "indicator--b1fd015a-bfb7-4c2f-a03c-865f8f835603", "indicator--e31d284e-b40c-470e-b014-adc064e96b96", "indicator--826538bf-85ce-4742-8ba9-73003cc82d1b", "indicator--2a756f40-5809-4fab-9110-1874734f5d33", "indicator--d2725fed-ca28-42c9-b0a9-c2ab1b490431", "indicator--e4a18a79-4cce-4585-ae0a-dd207dc3499f", "indicator--8db27f28-8bed-44ce-9dbd-1434125530c7", "indicator--f1a61452-8c4f-4b09-8e60-0d13701b357d", "indicator--88c28611-aea1-4ef7-ad13-710711a17040", "indicator--ed5768ad-06f4-460a-9c4e-b68a40e5278c", "indicator--2e9eed8a-204d-4172-bde9-15dab2c008de", "indicator--f2a36618-2fa5-48a5-85ee-5e2515a77820", "indicator--ecc6deb7-3dd1-4c5d-b1f2-958a49df521b", "indicator--7e533a94-1959-4ea0-b733-7fb92f3664e5", "indicator--8ad96528-3b80-4e75-aa83-89450df3c61a", "indicator--1cf14b45-770b-4315-8a4a-813f8c5b2b80", "indicator--2c6aeb23-0d00-4b3e-8810-a76deb62684e", "indicator--e0dc1aed-1968-48f9-957d-d42ff61877ed", "indicator--c0f46b42-f1c2-47b5-94dc-8d792d50aac9", "indicator--4e473af2-6049-4b5b-8706-813c508fe83f", "indicator--b966495e-bacf-4337-a0d2-5a8a62655df4", "indicator--86e72b33-a151-43a9-ab8c-20ce3fe34b02", "indicator--79fa893e-cbe7-4d01-a73e-70d11b86c208", "indicator--66d7cbac-45f8-43d9-aa81-79ede618f96d", "indicator--25c8d88f-c6ef-4c11-9a30-16fc7738d5b9", "indicator--7d341e0b-4995-457e-8bd7-d324baf08970", "indicator--bd4e5b20-4109-4792-9068-5e07ff4375b5", "indicator--bfad2e30-b0e2-40eb-a284-4d5bdb8f7fd3", "indicator--f1693de6-6467-4311-82dc-eb9c58ab70e5", "indicator--fb379b39-5b7a-402e-8a9d-847794681980", "indicator--c1f9bafd-52ba-4835-a7d4-bcfec5681aad", "indicator--67832d78-cba3-48c8-ac99-d5518ff9b06f", "indicator--72190f8f-115d-4ee7-9c93-c27be57e10fa", "indicator--bee0d89f-5a57-43ba-9316-4ab7c8c3d80a", "indicator--bdc5b182-d152-4803-a543-3c47df1f4c2c", "indicator--d7ca296b-7030-40bf-9fb2-35a91dad34b6", "indicator--f8822798-c2dc-4bde-880f-2b4c60fd4a49", "indicator--9c54a3c5-c6f7-4c3c-9df4-83da7349ce77", "indicator--acb36d0b-5b6e-4420-a5d3-475e3a559c6d", "indicator--dc4f3e8b-40a4-4a7c-9014-12c5343c8563", "indicator--4fc7d38c-c3ae-49f4-9dad-1b1598377874", "indicator--888022a2-7964-49b3-ac3b-0415ba672fb0", "indicator--6b726a67-cea5-4314-9458-1defc5556e87", "indicator--630ee99b-ea8c-4a15-985e-452f11c84248", "indicator--0c978b77-65c8-42aa-b7a8-7ab0aef03dd4", "indicator--ddf6b76a-bd8c-476c-a947-2b14ba8c9dbd", "indicator--00b4366d-76cf-42d9-b05e-c5e16cb8ad43", "indicator--6d6ef183-1e58-4f25-8f29-ffcac789a47a", "indicator--1fb25f0e-f243-4e60-bedd-71286728b01a", "indicator--fbdd2f9d-8192-466c-baa7-ef9f366ca321", "indicator--c0d25043-1f17-4942-8326-5cccb922a7c3", "indicator--921ee051-110e-4540-88f7-b1bdb67e0981", "indicator--5910d5f3-ba22-43f1-8187-c146cb111809", "indicator--057a5b0b-7d9f-4b50-941d-7111cbf205a9", "indicator--a86bb5cb-d86c-457e-a1aa-ce10657fab13", "indicator--c8fad0af-4bda-4dbb-bd46-3c6de4343897", "indicator--17ecfc5e-eb9a-409f-ab48-47cb0f9c10d8", "indicator--403a8995-d0d7-4423-8e12-5d810bed3144", "indicator--2673421f-86b2-4756-ac7a-3902f457f65f", "indicator--de528237-faa3-4e0f-940b-6d51e09f361b", "indicator--8970c0b6-7bb8-4c70-bb44-d43284df4f35", "indicator--8617265f-3b9c-4dbb-884e-4ef5671a72f1", "indicator--e370ab7e-deac-4c54-96c9-1a1b7fa4515d", "indicator--030b0203-8986-4d09-98d5-6cf9f13af27a", "indicator--5e2abb6b-7bd8-492b-b277-3eb1da61b97d", "indicator--12f1e41a-5616-45a2-b686-83a5f7aaee5a", "indicator--59e43980-8512-4c48-bb8d-8f7545365a63", "indicator--2696ad7e-a934-4e1c-a1ab-f803692afc25", "indicator--732e9f64-b6ee-4f02-9d4a-0c90de339a1d", "indicator--09d55c36-9eb5-4b40-937b-f61aed938019", "indicator--d9d9e3f5-c761-49fe-bcf5-5f4cf9f14a9a", "indicator--cd395464-8ef7-403a-b90b-37f050bc7e0d", "indicator--0469e638-7425-4460-b7c8-8719911c26e5", "indicator--22ff5521-a2b8-45d9-bdc7-f48205fc8fcb", "indicator--061c2dbb-6e56-46b1-8a5c-c1ef8095b723", "indicator--8fc3bccf-26c1-483f-80ce-8524706ac011", "indicator--86df989d-1e4e-444a-aff9-d2345b2ce61e", "indicator--43a7688e-ef74-4394-ab4f-011b352a6271", "indicator--d099d3d0-04ba-43ab-b0cc-31433fa464c8", "indicator--d1f63460-cf91-4238-abe9-3d369693072b", "indicator--21a274c7-5c7f-4c25-b44f-b445669ed662", "indicator--7a840e38-4c4e-4c19-914a-0c811073af15", "indicator--14293d99-48ac-49e4-a8cd-945ac74fdc07", "indicator--7102934f-c387-45ea-9763-4e60169998f0", "indicator--89664850-4349-4208-b9aa-ea9097822fc8", "indicator--8f5bcca6-0abd-4a8b-bc03-7f08353bbce1", "indicator--83edb7b7-c807-4afc-82fe-c79e460cd8cf", "indicator--261a1665-4787-4bc7-879e-b9087c943d47", "indicator--7cb1aef4-ebf1-42a1-a19f-64615f91a50a", "indicator--04af996c-7d92-4db5-9c0d-43d1a06d2d4f", "indicator--a8c4c5fd-cc1c-4112-8f47-293af635723f", "indicator--e4beaffc-6b9d-4bc7-bab2-728c43b4a94a", "indicator--0e73fe26-78b3-40c7-8a2b-a85507da35d8", "indicator--0e2e4e02-ae30-49fc-bc19-d0eb96b0f5b2", "indicator--a328de3d-f888-4093-a52d-abe4897b4ee9", "indicator--13e711be-e5cc-4c31-960e-a7f8483b94ed", "indicator--8a8fc13c-cfc0-4b93-8d98-97018f191b55", "indicator--49f6f990-2d73-4498-ac9b-ecb7e7af8a1c", "indicator--7592f840-f684-45aa-bbf9-daa85367a705", "indicator--a7a3e3ec-36a2-4a67-bce9-e47cfeaac11a", "indicator--f293f5ee-b201-49ff-83b6-840a22aa015b", "indicator--7aec13f6-7b33-4afc-8e41-ff4974c83e1c", "indicator--951ff5c3-7333-454f-b5b2-4954652605a7", "indicator--06087c65-6cf4-4458-817c-8a4813eb40e2", "indicator--a9837984-65e2-425c-9726-d10030344fbb", "indicator--b8b7e4b2-b700-413b-89f3-0a5390a1cd1a", "indicator--5afce699-b094-466d-8d14-134088e783da", "indicator--f338f5d6-2cc4-4430-839a-4acda2ba9aa4", "indicator--b12aee1a-ed31-489c-bfd1-25962ca5cda0", "indicator--26b409d4-ca0b-45e3-89a0-18d3f13b7074", "indicator--84ef2b36-c7e4-43f5-9020-ac0bd58bd22a", "indicator--0a062834-e53b-4639-b389-49b1f8574ee6", "indicator--66bf29c0-0c56-4ac1-b558-e08190d8f5d1", "indicator--3d88075a-970a-4d93-b7ee-73ffb8b90f15", "indicator--fb57af11-1757-4312-8791-4056a7a0a016", "indicator--9addcade-48c4-42c1-8b9f-bf6fb22b38c2", "indicator--53217ee3-9283-44ed-93f7-cbee8358d986", "indicator--663f8d13-7aba-4707-a68a-4484b852b9d9", "indicator--e917817a-a8c2-485a-8b9c-4a227e93099c", "indicator--65270379-a497-4c0b-a65b-8b0a95030a2b", "indicator--8d66ab72-040a-4b03-9457-291e95ed12b0", "indicator--4492d469-cb20-42ee-8167-6dcc040f04c9", "indicator--692ab4d7-ab22-45f1-9f9d-60cda6541f0e", "indicator--209aeb4f-f4b9-4b08-b451-e52cc7f1eb58", "indicator--2838f0e2-b2ab-47ea-88b6-805f901e322b", "indicator--b6b0aac7-97fb-409e-a39d-7108cd546752", "indicator--a3e65f7f-cc69-4434-b3bf-b6d600ac31fa", "indicator--65305b06-f96e-46d9-8c24-341fe618fe32", "indicator--fb07286e-a158-4366-bfdb-f72d88f8eb7c", "indicator--2e44ddb5-f5c4-421a-a85f-7374f89a05da", "indicator--b95c261d-5be7-46ee-ac8d-75b7bbcd71de", "indicator--38534520-289d-448b-8bc8-4ebf6d51ec93", "indicator--26ca92a7-2805-42d6-aa1a-a24484a939ee", "indicator--50a9924c-9f0e-4005-9dcc-f451834c9019", "indicator--4c01be94-523a-45a8-b860-83453b57366b", "indicator--3ef62c52-668d-4f99-b93e-a1a74b4330a5", "indicator--932cc682-1960-4d6d-835f-9b18cac7a52e", "indicator--6c8938cc-8be2-4e1f-a953-52d7c6edf10d", "indicator--92884d35-d079-4ca4-9908-40fe971f8cc5", "indicator--e2412c85-4452-4afc-8940-409923f3a3df", "indicator--3085686d-e3a4-4126-8a3a-73de5ca7bd93", "indicator--49ffe833-d310-4ed9-b1fc-a699e8b2a44b", "indicator--63ad7348-1f45-4502-b418-a6ad868234c2", "indicator--b7af25aa-3411-4d95-86f1-d076a33d0548", "indicator--611cc267-70a4-4aa3-b950-497fa62cce17", "indicator--e0691651-36b4-4be9-8203-2aa152c4ee28", "indicator--402dd8f8-c1dd-4f69-b5e9-004488b3fc39", "indicator--0170d0c1-e3bc-47ee-b57a-72638cb4e342", "indicator--69d4782a-a200-49a0-a807-cc991db7f6c0", "indicator--dba3e2d8-978e-448d-97f9-762ed2b732d0", "indicator--88078731-59bf-45a1-ac6d-14bd7a26d422", "indicator--dd65924d-df1b-4a8a-9e46-8b9a325e081c", "indicator--d866b93b-9036-4da5-9cfd-03775f0eb50b", "indicator--5da3ab1c-36fb-4263-a9c2-df514999bb1a", "indicator--bee8cc14-44ca-48f8-bfdf-efac1c6b0e48", "indicator--d94daa91-7e27-427e-b110-55608ec5b198", "indicator--4cd990a1-c3b1-43e8-8162-4db1bc2a8423", "indicator--31d401cb-9fa3-4c3f-b49e-450bd578bfb7", "indicator--fa458478-cd46-41d5-b0e5-84e1a7b6a896", "indicator--14f5bbba-fb7a-4b2a-8ea2-9859e03fbe2c", "indicator--9486107e-3e0f-4007-8dff-1f91a4c2d119", "indicator--6246f8b5-4a4b-4e2b-9b5b-29844bc49bfb", "indicator--728df79c-f33a-4466-b621-bd954757a4f5", "indicator--d6255147-377d-4413-8ef5-209776d3f27a", "indicator--ecefb954-1920-4d1e-8d6c-21177c5bd863", "indicator--2f3df0bd-deda-402a-9935-98b569586157", "indicator--d280e57e-9248-49bf-b78d-6bb3ba7a3a61", "indicator--7c3046e9-9e29-49ce-8d4b-ef14ffe2bc98", "indicator--27c3c57e-df88-4970-9fe9-4148a9daa352", "indicator--17ba6ef5-ee77-4a33-8cd2-83ce5b2cb623", "indicator--d7cf1371-b15c-4118-8df4-b2c910e0c329", "indicator--81eae21c-c38c-4290-9bca-68702b0d2b24", "indicator--597b5901-b8b9-4d47-b47e-f028f3ce478c", "indicator--90226771-a053-4452-8721-3aa30cb5dc30", "indicator--cba3f186-8097-41a3-abe0-6af9351dfb68", "indicator--96799d60-cf44-404b-9017-fafbb8a57911", "indicator--bb4333eb-9606-4238-8c86-ad41e119137e", "indicator--aa400d7c-7356-4b18-b9eb-25a189781cdc", "indicator--933a005a-1ea2-407a-a037-a4ef64144420", "indicator--4b3771c8-5858-4c01-bcd2-820c30558ab4", "indicator--6cb3ab53-9d8e-4340-a7c8-7ab16c0f59f8", "indicator--8acfda9a-c81e-4b29-b91c-108da10b87bb", "indicator--b0d2b085-6be1-415b-b6f9-47019c319ec9", "indicator--531f548c-874a-4c6a-b4f8-0b1bc20e565a", "indicator--5f190087-de6f-4545-a0d7-1558f8bbf32f", "indicator--981a4283-b38a-469c-9c17-9daaa4a5e4d8", "indicator--25fdd349-0f0c-4224-8351-ea1f7fbe39b2", "indicator--64c409da-bb4d-4914-8b76-7c4434f95ed1", "indicator--ab51f185-b03d-490a-a8ea-f12d56ac2726", "indicator--9e7896b6-92ce-4a69-bbc9-122c7f25edd3", "indicator--8a85a0ea-4e5b-4ae1-b526-bc68afa37afe", "indicator--bbf4021e-c48b-430a-8b60-fff7cdb01f0a", "indicator--8648f31a-501d-418c-ae7d-2dcee24cb407", "indicator--b57150f9-ef8c-4a70-b399-da4579a8ac5d", "indicator--caed0011-05f8-454b-9051-9aa03729bc78", "indicator--ec1bab66-5221-4b5a-a361-540ce1530675", "indicator--6d177914-980b-4963-9a8b-6e758782e363", "indicator--27c8514f-4f97-4e95-be24-8a12db810fb4", "indicator--1034174b-c42d-496e-96c7-50d014610510", "indicator--69f47606-eff8-41c0-a429-0e0a5bab0b0e", "indicator--6c936702-a10a-46f3-999c-79af7724f749", "indicator--784a7637-c09f-4676-8873-6dc0d24dd9f8", "indicator--b4d3fc01-8ec4-4adc-83ed-9fba1126a8df", "indicator--abc4effb-40de-48e2-9890-c9c5f0aa764c", "indicator--973c9441-30a7-464a-8488-29dc85d6ec8d", "indicator--8e057e33-aa7f-4a63-ba69-fa57407f9caa", "indicator--cd399154-8e43-4928-8d2d-6216d03db4a8", "indicator--15690914-7a1e-46fd-b05b-6e5dd37c45bd", "indicator--3db77e1a-d37e-4143-8da1-77d6f1767984", "indicator--d6978b16-9b2a-4d4d-9e85-2de38f0e2eca", "indicator--229d1fd0-ba36-4f9c-a3c4-8f29cb4930c7", "indicator--66823057-b8e0-4442-9b9d-ee87e44b5f76", "indicator--42e7c48e-e372-449a-9f5d-44893773c81f", "indicator--0f915c93-4732-4be0-8ecd-8ee8ce623bdf", "indicator--cbe62eb6-1235-4f4c-aac2-993aa14c54f2", "indicator--9a8e8704-85ac-4c42-a760-6b53e35d744c", "indicator--e03de602-ebdf-4f6b-8810-bcfde348ee1b", "indicator--f58c756a-719d-42c5-b897-6189135acc07", "indicator--340b17e3-6c78-4b58-9397-59bc6f0193ea", "indicator--51bbab6a-0d9f-4d0f-bbcb-1eeeeeb45afa", "indicator--0a6e3eb8-656e-4b0c-8731-cd214b9987fd", "indicator--3f260c7c-62d7-44c0-86da-01c31e6c6d53", "indicator--7a9b156d-6609-4253-a035-6d7715e166dc", "indicator--60988009-241a-4e2d-ac0d-4d6473d455c0", "indicator--46f40955-78e3-43fd-9461-c9371c872967", "indicator--8d6fb6b2-e252-4b8e-97ed-d06eed3a5942", "indicator--1786d156-d3b5-4726-9bd3-cb7514f4ed61", "indicator--9f4d4abe-a0b4-4956-97b3-c7fa2dda0979", "indicator--b3ba2c53-791b-4a0c-a129-a11cf0350a47", "indicator--17a5f98f-a61b-4d24-8ff7-6f3e19e809c6", "indicator--741108e7-9803-4880-a243-388fa914fc86", "indicator--48628f97-cffa-4d5e-92b4-08281824b671", "indicator--cd5224e2-530b-441a-bebf-d7e83e54dcde", "indicator--0619ddc2-d7ed-46b7-b6fc-8a049557754b", "indicator--31a12b65-9e14-49b9-957c-030ea9a3936e", "indicator--bb3853b4-87f2-4b43-9957-dd09302df30b", "indicator--f74800e7-245f-40fc-acaf-264803c6eaf0", "indicator--350c2487-ee54-4f1a-bc8b-2a6e495fa030", "indicator--6a817d73-9e5c-4a52-b237-89f45db7717b", "indicator--6bf1f928-65dd-43c0-9a7f-c8a8570f0454", "indicator--00e1479b-c39c-4a74-abd8-01324c2ec271", "indicator--f647e33a-7185-4ce4-924b-43bc369459a1", "indicator--f6e72775-795a-4b33-9d42-0bc891a6696f", "indicator--241c22b6-0697-4d4b-8a13-b2d741241971", "indicator--d542b3b6-f16c-4a1e-a91b-777896f3cae0", "indicator--d82147f8-161e-496f-b944-62846a481afd", "indicator--3f837239-a4f9-4562-bb1d-44cf771543be", "indicator--67033c65-16ca-48ab-b87e-eb9620e4ecae", "indicator--c53e517e-e9dd-4c6e-ba9c-5314b5a21e79", "indicator--fc21ad4f-239a-4ecd-92eb-670eed0d7dab", "indicator--40b01d44-935b-4168-ac48-8b6872023a68", "indicator--bd9a1110-554a-456f-ae8f-3ec324a4a0f9", "indicator--4e9a30b0-3e82-4b9d-8f74-c5449bab0fba", "indicator--6d78abc5-06e0-4d46-bc07-d79dc83f275a", "indicator--d07d6cb4-b05c-486f-b7c2-dbf77c8e14ea", "indicator--da76bc82-776a-4a79-8377-8880f029cfa7", "indicator--c376001c-47f6-4067-9e8f-0e683b54cc9a", "indicator--e454dfa6-43db-46cd-ba83-f5f51ca7393e", "indicator--2cfcba99-f2c8-4d07-997c-7c8d3bd5457c", "indicator--026a5f42-0741-449b-8534-fabf007f4324", "indicator--3d5f00bd-bc92-4bb8-8bb7-e4c714d426f4", "indicator--d5d88063-0b78-4055-8986-6058931a5d42", "indicator--c185f013-476d-477b-bd32-08204aea40f3", "indicator--08ab8c56-da10-49d7-a970-fcae260f884f", "indicator--6c0d2f8d-153c-4a1b-af17-f7663d599bb9", "indicator--938323d5-1e15-4f6f-b03d-8468b7fa59c2", "indicator--10ecfcfd-e9f5-48b2-afac-12870c742d0d", "indicator--bbc94a40-8cc8-4868-81af-f73662697238", "indicator--6f06dd2e-1f84-4db1-9a4e-11608e53abb1", "indicator--41110114-3164-4840-9935-efd1dc62b826", "indicator--0b49ccb2-ba15-491f-bbe6-cf9c59b2aff3", "indicator--88d866d7-af1b-4ae5-939e-2485c4f7d4b9", "indicator--26951da6-c2b2-4c85-b9cd-63bf6d3e6ec9", "indicator--d80e4fd5-3a40-4543-9e03-9963506321ee", "indicator--a4937e9c-6874-4ad2-ac0e-578ae6d95068", "indicator--41093a0f-dd34-4c66-8980-72f989f61ff8", "indicator--dd495d89-983a-4f68-b769-38f0b2a59fb1", "indicator--9f5c18f1-1a44-4910-a5c3-22e5bc476cd6", "indicator--6675b230-bfa3-454d-9648-90cc0c305e89", "indicator--448d65b0-755c-4f21-b617-fcd35c2a0ff1", "indicator--f0d1323b-c164-41e2-8065-12612bcea02e", "indicator--a2a7500a-68dc-494e-a75e-230d6f518f89", "indicator--c72564b6-20f6-4a10-ace0-f8b4b3c0ed33", "indicator--103dd06f-3b79-4e33-98c7-447bddeeab0a", "indicator--2df87199-954a-4d22-b05a-fda08500eaed", "indicator--1fa571e3-64a2-4339-921e-05902121312c", "indicator--4f87d9ed-c585-4366-abee-bb9b56777149", "indicator--01ec42cc-4863-4b0c-926e-8eb855a7e37b", "indicator--c5ee091c-4aa0-4c74-a2e6-31802f213a7f", "indicator--bad3eb5e-5a1e-478a-822d-68ad1ce269ad", "indicator--3b6c12e3-811f-4d13-ae74-8015fc4e9cad", "indicator--103ec762-93e7-4d40-b1c1-330012679ba0", "indicator--9dec7a04-970b-4e66-95af-e496821803df", "indicator--6eb79b40-770d-43af-8402-04b03e1ab36f", "indicator--b56dd60d-3b28-43e0-893a-e3ffda015cdb", "indicator--90810f42-a0a4-401f-ad14-bc38324f73a4", "indicator--cbdd01e5-31b8-49d1-af4d-f7a2b2404ab5", "indicator--88bc2afb-2b57-444c-8df6-5eb384905886", "indicator--221efa90-d07c-4744-983e-5492bf996332", "indicator--8a7b5cb9-d9df-4968-9b2e-114f992882c1", "indicator--861c4a23-e184-454e-9258-11a8eedcc48e", "indicator--926f824d-f1df-47e0-b4e5-024251c21d33", "indicator--0dee5ca8-a3db-4909-a3a9-c2f508f4fab3", "indicator--f8fd8409-4245-434c-89b7-1641ca12f088", "indicator--4512bc51-0375-4a6f-9b78-b6f4e607e9ca", "indicator--9acc73f8-497f-4ec5-886f-8e51ae51d7bc", "indicator--a973bc73-9522-4bc5-8c7e-97827ee25137", "indicator--11a58fd6-d195-40f4-9863-36d98df3ee33", "indicator--2d39513b-a03b-45f2-80ce-d42de3b6575b", "indicator--c5aed9ca-1e4c-4d55-a8ec-44a4027a43ef", "indicator--7b86415c-03ab-4780-b2ec-22da514e7739", "indicator--eb929aa0-31cd-4dc1-b640-dddb5d6d22fe", "indicator--9de28d10-f36e-462c-88eb-e04145abf50e", "indicator--cc33711d-cb90-42f7-9176-169eddabe272", "indicator--a9032acd-5a1b-4a50-9394-1f514bb822af", "indicator--db88ea20-a80a-4c01-b7c2-b0915a33e4ea", "indicator--0c40bd59-d22a-4687-af26-2385de9b9c33", "indicator--ed1803fb-4265-42ca-9a8f-efa680f9c2da", "indicator--5a22b160-e323-4e92-9125-9b28766f4f7d", "indicator--ce0313cb-4c97-4af0-a64c-cdd22ba15096", "indicator--0498a99d-53d3-4d32-ad8b-cc1e18a65c35", "indicator--17f4acfa-5eef-4632-a054-5982af6ffd51", "indicator--5083b2ff-3618-48ce-81e5-fea03ca831e0", "indicator--134d8395-321a-4cfc-bf1a-3649f5717c1e", "indicator--afba23f5-6a5f-487b-be5d-32546e1ba495", "indicator--147edf6e-36f1-4915-a25e-4d88d2854d6c", "indicator--614fab56-444c-42a3-82bf-46b0596fa430", "indicator--862d6683-b1d0-479e-b0de-bc723a49cfc0", "indicator--cc942e8a-cac5-4f3d-9765-560bdeaf6c5b", "indicator--7bf65fa4-df30-4093-a35d-8a32aac5d0a7", "indicator--73cbcbfb-3034-4d9e-8586-d0b4f00875ac", "indicator--4cae1f1b-0251-4ed2-aebe-94ca5aadcd3c", "indicator--cc373b47-735d-4033-8584-c0e5bf849970", "indicator--1d0c6999-47e1-4bf2-8832-7cecf4fff5d8", "indicator--8ac7a858-d7e0-46fe-85c4-8f51227e4c73", "indicator--1313863f-16e9-413b-a0ba-333a23b68e83", "indicator--c97fde81-9ae1-4f9f-a5b6-111ceb13c42b", "indicator--3ca97a94-7794-42b2-9b47-8d54137f6446", "indicator--5da752e2-588d-4100-a5ae-655c05b4ec5b", "indicator--01029d70-6e66-4089-b202-40659bc2844d", "indicator--c04e438f-52a8-40cf-aa7b-3e138cdbf0d0", "indicator--52566b35-cb46-465e-a0b2-f32d2d328b64", "indicator--ad340c50-740a-4998-8c99-485674d26f7f", "indicator--cf2215dd-10ed-42f2-b2a8-85387b4d306c", "indicator--f4837f8f-3575-4b6a-b90c-9ae7328c49e8", "indicator--b6dfff00-13d3-4b1a-ae46-5abd221d0b4b", "indicator--8bd62595-13ee-469e-8731-598c15074cc9", "indicator--ef097a3e-6987-4070-aadc-2d09e77872c8", "indicator--a36b3b9e-d350-4fdd-8e99-e7ca066a4ada", "indicator--671cd4b2-f902-4519-b7ca-aacee95ac9c4", "indicator--4cedb437-e443-48ac-9560-8307267ebaf9", "indicator--173fc021-6953-4172-859e-56df3c8ca993", "indicator--25c18d38-6cf2-448d-a11b-c85eac1938ef", "indicator--7abb3aec-d41e-43d5-ae44-dc81f3cc67d8", "indicator--358114f7-7c32-4665-a6ed-884b3088271a", "indicator--6432ddb1-78d4-4fb2-9516-a635e84ac319", "indicator--06eef9ca-1670-4c95-ac7e-f6217149c528", "indicator--d5db232c-dc2b-4aa9-95a5-7c124622d436", "indicator--bf7b9deb-e398-4e14-8247-c3cad8894566", "indicator--bbcc067a-2ecb-426e-9070-1839aaab2709", "indicator--429065c1-c79a-44f7-b3e6-8f206eb32304", "indicator--5c386320-f8b8-41de-9e1d-3368025b7ba4", "indicator--68c522ef-484b-4546-9f2e-eaeb3f5ea004", "indicator--ddd30a8f-d0ba-4ce7-943e-9b0508dbe4b7", "indicator--dbbc2ce6-ecea-4edc-bec1-85e2bae6ef58", "indicator--cc5937e8-9352-4633-805d-59e6c93d983d", "indicator--0c3ffd39-08ef-437e-9492-b5c0e4b76556", "indicator--40fa98f6-d822-4a13-b89e-94fe78fe4587", "indicator--ede44c16-1f67-49b9-950e-f72e9e846eb1", "indicator--018f1187-8d10-44a0-93a2-00c2a998e596", "indicator--ad8a6084-6d10-442e-8fda-2d8e283daf27", "indicator--78fe48ec-57a0-435c-9fb4-0883d850dc92", "indicator--da6b741d-c760-4966-94a6-523781ec506d", "indicator--22c055d6-1644-48a8-96bb-26edddee250f", "indicator--8452b55e-2fa1-4ecf-aec2-1c443e180e50", "indicator--bfd98593-fe4d-4e14-afaf-5a0bbb0d0735", "indicator--0313d005-ad9f-4c2d-9235-5a08e816908a", "indicator--ca4b076d-323a-4c1a-aa1c-263ba8d73eee", "indicator--c1a80b4f-3e2e-4202-8b33-d1ea3ee0d473", "indicator--dcf7c223-3604-470e-ba0c-8ca501e9de25", "indicator--5e719b91-1933-42a6-9985-9a50636832b3", "indicator--ea7a8b30-6e83-46e9-98db-f35bef688a2c", "indicator--98437099-b5f3-4e1b-8ceb-81419601edf3", "indicator--986dcda2-3d08-4730-bfa7-f961545bd590", "indicator--dcd7eebb-80c9-476f-9c02-a21ec90213ba", "indicator--ea26e1ef-0663-4089-82c3-444e4bd67608", "indicator--df16e030-2724-4164-8a09-b806b22a86d1", "indicator--6fc37900-e738-4c6e-9f64-33e8357a9bf7", "indicator--bd3a2ea5-b2f6-497e-a740-f070f5f096a7", "indicator--dd4ace3d-ac66-4e4f-b4bb-8aa7d2f3673d", "indicator--e2b635b2-2f4d-45ef-abce-dc04aa6ddf12", "indicator--d0b2075c-4f1b-4fca-877d-d650933cd4f8", "indicator--f58c3273-2dc7-4aec-ad93-5623ec4792cb", "indicator--1c8b259c-9caf-40b0-a632-5f75fd8287a1", "indicator--4e3ab0c3-47b9-4658-8ea7-15136532b85f", "indicator--d69b9848-52fb-4ad2-a268-9287e7ee8f4e", "indicator--d6cb49f5-c053-47af-b960-5af6ee306720", "indicator--0d1572b5-ab8b-43f4-9212-87e4800dd606", "indicator--2fdd4f17-bdf8-438f-8b73-216a92a496e4", "indicator--79066425-3c50-45e1-b11a-74f6b151a671", "indicator--67c3149b-064b-4a8e-8299-159e0c327ed9", "indicator--055d0010-bf19-4ce2-be13-ca0b25ba85d4", "indicator--7f626e30-5437-4299-b05e-06bd746ccc95", "indicator--836d2f36-534f-4838-bbfd-9ba15e2d233a", "indicator--12d4fe52-9eb6-43c5-94f6-e9058e330409", "indicator--f5844f6a-5c98-4506-8f75-17661b4e1de6", "indicator--8dc5631c-b01f-415a-a0b8-6e32a8f1cf71", "indicator--c5e6e546-1fb6-493f-97c2-b7cea32f0002", "indicator--053107f8-b936-4dc4-bd1c-564a349037a9", "indicator--5a03ecfb-0a79-48cb-99f7-e6a8ec7e4bf3", "indicator--0282f76e-b925-4951-bc56-1d9cdc8151cb", "indicator--c893d0f1-7406-4662-8e16-d0d1c3e82211", "indicator--78307a07-5c12-4d45-accf-efcc25916392", "indicator--534bae93-68c0-4f02-91b1-d6a024a7548b", "indicator--c3f9288a-e967-4408-96c2-5fefe913719a", "indicator--1d0b1e9d-2929-48d5-b8fc-5133108a77ed", "indicator--c7e64ff7-eb3f-469c-b8ac-5db6a3aafd6f", "indicator--e6b1890d-9898-4675-9030-4b1394001dcc", "indicator--79e125fc-5fb3-45f4-a55c-7af91d028a3e", "indicator--2e5fc250-c542-49c4-aca7-d7d72b4d1c3a", "indicator--61040ca9-6a4d-458b-9330-5e3efe281487", "indicator--8f72da44-5918-41b5-95fe-6e7dc421abdd", "indicator--a7636f2f-688e-4116-9d6b-c8278b98a164", "indicator--3cc5859f-1914-4a8f-ad19-80e2eb58631b", "indicator--b4552dcb-1f36-4c46-b46d-456c9feff34f", "indicator--7243a852-f584-40da-928d-8d1cddfe4759", "indicator--6149875c-056a-426c-8890-ab7813df16aa", "indicator--d6617092-c5f7-4992-b7f6-fda906705a5c", "indicator--d9f90e97-8210-40e1-a6fa-4356f2580e37", "indicator--70734c2a-c1ce-41e0-96ff-85a8d0e95cf6", "indicator--fbcb3072-ccec-4e48-927e-554e22f8b065", "indicator--e7f3f541-df76-4fb7-a65c-626b4ac98090", "indicator--854fc34a-4678-4c4a-863f-bde97a18573e", "indicator--c8eb8f97-e8d0-4ac6-aa26-6450e7f843e2", "indicator--a11989c8-27d1-493d-845f-6484798c9535", "indicator--cfe803e4-d2f7-4556-a8f4-7874df69e9e0", "indicator--2038026d-d819-4f0b-8400-fa825754684f", "indicator--ef2036a6-39e4-45c1-b22e-5d1d59d212c5", "indicator--674edf57-e340-46bb-88bc-baa87f5997fe", "indicator--94d70080-8c25-4036-894d-55f182a2828a", "indicator--a116139a-9c7a-49f9-bbe7-6ae046c079f6", "indicator--d2d13684-7fd4-4ad1-8186-3902bd71bbef", "indicator--8df2f806-258b-4db3-a527-a48133ac906b", "indicator--4a33dd7b-e8f9-4fa2-92ef-583d5ff22219", "indicator--19fa76e4-3b72-4f4c-a3e2-0db6848a157f", "indicator--ca0898b8-a365-4a9a-9d04-10e69443c3c1", "indicator--bebfb185-27d6-4c50-892b-12553b87ef42", "indicator--59f4dc0d-2970-40b2-885c-5c43a797f2ff", "indicator--c70f2c03-3516-424b-b0e5-c32015636e77", "indicator--caaab6e7-5d5f-43a6-bef0-15aaaebdb867", "indicator--09b28854-231b-470f-92c9-fa99817ae121", "indicator--37b3202a-efeb-4489-887d-2377ce4f7caa", "indicator--2ffce772-10fe-432a-9eb0-4f32e2b12e12", "indicator--c2ec8c05-739d-4e7c-bff6-ab5c4e774d86", "indicator--076da78f-edec-4b51-a4dd-3f7314bc409a", "indicator--1677fd64-fbec-487f-8510-d0ed29d26766", "indicator--5f74aced-d2be-497f-9b31-8d077e9e33c5", "indicator--7a9e3fd2-78fb-42c5-ad33-c3023561655a", "indicator--f8ca6569-3fac-4d03-808a-95ef8f29c8ce", "indicator--21001596-0174-4fec-a777-861634201624", "indicator--2f88ae75-d8f2-48db-a0b6-e7626fa7a092", "indicator--626ab70f-cf1c-46cd-b426-5d2e902e3aaf", "indicator--fe67d7d2-c43a-47ba-aece-9d70d9739b4e", "indicator--0c075fbc-b4a8-4878-bb33-443fc457470e", "indicator--345210d9-1579-4580-a0b2-c2284e3674cb", "indicator--e7ddb796-792f-4732-b9b4-5db0bff5a933", "indicator--5f682f49-c370-443e-9e42-3d49474cb46e", "indicator--7245fe37-52b1-418d-9b19-9ed548bef24f", "indicator--8fe96cda-1efa-4652-bec5-1e544f54e714", "indicator--541ce725-f832-4889-912f-bafec82e1089", "indicator--7a85b31f-1c7b-4a6e-a6d9-92940609375a", "indicator--84078415-57bd-4048-9bb6-2b9f38d5d7b8", "indicator--a2d1778c-a194-465c-bb7f-f3085d6e79ed", "indicator--4440d84b-3845-485b-8487-1f9dec1a45c5", "indicator--c0a4a5fe-ca23-40f7-84df-3bf1507939f2", "indicator--a3764197-d886-41aa-899b-c564f94a0771", "indicator--e6eb2645-9432-47f9-a4de-793715c11fa5", "indicator--938ecf17-bca4-4bd0-b6c1-5a0cc97071d7", "indicator--859c1be5-8dde-44ba-921d-20715799c1d1", "indicator--66be5a88-6045-489b-bc33-faf57501838b", "indicator--31a8b92a-6306-452b-80c7-c34da17384d6", "indicator--85a79d2f-59cb-4209-b201-c395b089d75a", "indicator--ab71bb32-22d3-469b-b864-6b53b7d2959b", "indicator--93c98242-fd3a-4a1e-ba60-596608648ca4", "indicator--0013a9cd-710f-4654-9a64-9c1c3d6638c2", "indicator--97e2f980-d01b-4bf7-b815-0d0d1403e532", "indicator--4fcba630-453d-4bab-b45c-8de04dd27506", "indicator--1faed129-1fcb-4325-b671-9bcb0ca178a9", "indicator--ebcabaaa-b7be-4182-bfe4-173ce50946b8", "indicator--5a9f5479-6331-4a61-99f4-2d87bc74df48", "indicator--99f7f334-2ed5-4731-a050-52fed971c8b7", "indicator--7672f526-b0c2-4d36-b608-b00735b7640e", "indicator--57f1cd4d-4e97-4ebd-b163-d22b6a4c2c0c", "indicator--dcca9bfb-cdfc-4a89-9e83-677232342a34", "indicator--687ac0fc-ed40-4603-9a75-547d7c4576fc", "indicator--965e6187-4003-424c-ade6-2380dfc45ddf", "indicator--db733668-fa8c-4e41-a2a1-73ff9d92e943", "indicator--8f53c654-db53-40de-a8f8-f35865913834", "indicator--fdb35cd7-c14f-49a8-a2ce-617bbf7ef84a", "indicator--ffa56ae7-f09f-46b1-83ab-3fa15c0ae778", "indicator--0cf96029-264c-470d-a603-ff9556d3a443", "indicator--79859da3-6778-487a-8fa7-f6d0a76dd7c1", "indicator--717cf4b2-6b41-4ac3-8cb6-6724d85e5ce1", "indicator--f4ece1a9-7ff0-457b-b1a2-760756e9c6e5", "indicator--80695c97-016e-49f3-845a-d33840699dc0", "indicator--40a8c363-3590-4579-b2e2-5cb216793f72", "indicator--1dbc5029-711c-4c64-8579-c199fdbd0beb", "indicator--c11a1b9f-3c67-4109-a2d2-5ce17b3e5ace", "indicator--cdadcf83-7d55-45bc-a8a3-cef6e99a4a03", "indicator--03e7177e-2b7a-40f3-a8c4-1ff55cb2183a", "indicator--15aa7a10-54da-4cd1-8482-50f1dad38dc7", "indicator--5aaaf4cd-827c-4ade-861f-f9aeebaacdc9", "indicator--09dcdcd1-d9e4-44dd-a711-8f7ad0824cc4", "indicator--0a360dd0-1387-4cb0-8977-da3ec11f8b1b", "indicator--1c21e0f7-c90f-4031-85e7-000ba694f533", "indicator--6a059d1b-6ee3-4901-8d11-6d38deea1054", "indicator--caa089bc-317d-4eff-96db-ac44fe80c0a1", "indicator--6375f330-5503-4986-b352-9ad6522823a6", "indicator--2bdbc73f-49d1-47e8-8a42-438ad543be72", "indicator--e4aa4ba8-a01b-4087-b628-f271b18ca55e", "indicator--ee8c054e-54c3-4376-92e8-6a9233ba3abd", "indicator--5a610811-0098-4b3c-b325-393ea01d2f2c", "indicator--ab85469d-82f7-48d9-b4bb-9335875a4bf5", "indicator--1908fbb4-61c1-4cb6-a723-58bbff4b0e57", "indicator--64a618c8-c18c-4199-82f9-4a353ca3e10f", "indicator--1c7cf407-6f28-463f-ad84-79f2837e5661", "indicator--9ebca343-0966-43cd-944d-55070cc6edac", "indicator--8890e4b5-41e4-4515-99bf-3e1c798b6898", "indicator--3b9ae0df-c119-443b-8f5d-c3ad8f012bcf", "indicator--b5ce061d-827c-46d8-a52f-e6d946370249", "indicator--a10f493e-2393-4c3d-8639-3a01990b3b28", "indicator--56d4d543-1b6c-4756-a065-26090138e1e9", "indicator--08d483bf-9dc7-4bc3-9450-8a1d6d5269d1", "indicator--9cff7301-e774-4e89-8b39-c6181f8e8a45", "indicator--fa69492b-bb9c-41d0-adcf-0ee6764ab11c", "indicator--70afbabc-2f54-4aeb-bd7c-f25823309c40", "indicator--f5ad7905-acc7-4a4c-8ecf-6feaf2638836", "indicator--30f1e528-e675-43f6-86bf-5245906b1a2e", "indicator--9c0af2ea-47b6-456b-b01e-d21a0dd425d8", "indicator--0fc4cf64-00a0-4b92-bf8d-70b916094d47", "indicator--088d74b6-1240-45b1-8054-25a4464a8987", "indicator--716ffbd3-554f-43b2-b914-f5240fb985ce", "indicator--cad22cd9-cdca-4250-a388-fe6ec6a809af", "indicator--80db15c6-462b-4d62-9c64-9018b9b19e38", "indicator--739dfbb3-45df-4882-8d23-94c57594bc32", "indicator--193e4f96-9995-49da-9dc9-fbb9655bb3bf", "indicator--82d75807-e6ab-464a-a04c-b13877d38be6", "indicator--0bda1f52-961c-4e9b-ad81-f1163ecbaa7d", "indicator--5cbe3a43-49d9-47ef-800d-43e253975f33", "indicator--72788532-aa2a-4f25-9453-6556a2677407", "indicator--f5fd1af0-88f9-4ac2-a623-bf56be331446", "indicator--eec18e03-142c-452a-8103-353a4fc14684", "indicator--8dafcc9e-0743-430e-8c6e-034b68fe9a43", "indicator--8a1c9ede-c2d6-4e24-9162-fc50f7be384c", "indicator--eca4488c-e358-4356-b072-84aa3ea2ae02", "indicator--b6cba06e-9ed6-43e4-91d8-cb9bf3efbaa8", "indicator--f74085d2-48e7-4c7d-8c05-56e6bf0f144a", "indicator--13a67a10-d0c6-45a1-aab9-cdcf9ca8c1e7", "indicator--62890f90-5503-4803-9bf4-9087c6f10c1c", "indicator--68b74713-2847-4bf5-8734-9bdd15be0d3b", "indicator--5890b56a-5e71-4b27-a500-9cc742ea59d3", "indicator--6ed76df8-4dd5-45d2-9219-7346e02671a0", "indicator--c307e869-3eb6-4422-9211-a28b5a30eab8", "indicator--1442ffd9-598e-4266-be74-54529660a8da", "indicator--d18309c5-45f8-45e5-aef7-8f0005a14bcf", "indicator--5986e779-e5dc-4b3f-ad37-6d124f5c1dca", "indicator--261b0f32-899a-497e-9d96-b3408faec2e9", "indicator--17b3baf3-7f7c-4000-b732-1fa7045e36b7", "indicator--a7447d2d-54dc-4318-8691-41d278cdd8e7", "indicator--278c1289-2c7c-48a5-b0c1-6283dd39ecdf", "indicator--964adb08-13c9-4289-9573-19f30b8e2f58", "indicator--cebb4c83-fd32-4809-938f-54e62d5e8c9b", "indicator--4f297709-4390-48c6-bfd5-025de256ba4d", "indicator--0b2a58b1-c6e9-4348-a802-c1aac258fc5d", "indicator--c2c6e59e-270f-4a0a-80b8-2c1ed6da7110", "indicator--eb8fdda0-ec95-474e-9df3-fe2b9d0bd80d", "indicator--7d74584b-1845-4fda-a012-e1d372e1a36b", "indicator--506e805b-3e9a-4bb6-a6cf-5f8438c58567", "indicator--4c65e5eb-4350-43ac-98fc-d2485dbd61fa", "indicator--8cc518c6-38bb-47d1-bdb8-ab8d08f7e18c", "indicator--020c00c9-75d5-48e6-adf6-400eaaaa6ac7", "indicator--992f78d8-040c-415e-b0dc-2b3f39e7ba92", "indicator--8b720a82-5889-430c-bb72-55fa77b7f153", "indicator--0d0cbeb3-5bf2-4baa-a68c-623d11bb78f2", "indicator--63556d21-36b3-41d5-8aff-553187adab2e", "indicator--449f695d-ce7c-4129-95cb-8552cb31eafa", "indicator--eb0e1627-8775-4534-8dfe-7aabc445167e", "indicator--48156e05-2c3e-4a7c-acf3-e0fa5959fde2", "indicator--a4dcd4a8-0fb7-4c1b-821a-0aeb92a4930c", "indicator--157679af-cdf3-4db9-9435-b5be3df67503", "indicator--03b91720-b929-4b3e-8da3-07d70f084ded", "indicator--de8b4694-1b95-4094-bc96-921f7f503455", "indicator--e5d31564-55e7-4d9c-ad3f-dbba2f342ed1", "indicator--55b54c1c-b28b-4e05-81f4-1b6dac5f8c6e", "indicator--6866b66e-6f2b-48e9-b739-a5f33533e407", "indicator--aa8728b7-05e8-471f-bcb8-8fb1cd409e00", "indicator--c2235bbc-b667-4151-8caa-dec0f1e42b85", "indicator--b90732bf-3763-4453-a9eb-9302acb22027", "indicator--c26d014d-87d1-4d6d-9f0a-2305b3651333", "indicator--4041276a-4e40-476f-8a1a-00fc01272d23", "indicator--9c2fd7de-5800-427e-a979-2dcd9a0d7af3", "indicator--e492e8fd-8a7a-4130-aff3-d05f812ad900", "indicator--7d179c7b-1579-4d23-aedc-7ec7503dc4f6", "indicator--4e2d51d9-7368-447e-a527-8fde2cffaced", "indicator--acb84070-1477-4f7e-b003-fa3b9762f446", "indicator--80f370ee-de85-4920-b097-e7e265619de7", "indicator--36b6cf82-fcb3-4aad-b86d-43da8663d60a", "indicator--d38266b8-6acc-44fb-a41f-42f0906c1b54", "indicator--7ba38c94-2c21-417a-9cbc-3a667fccf026", "indicator--269b4fa7-ef6d-4d49-b603-4397c3323e60", "indicator--8dbdf54d-5f6c-4c3c-a046-c4a3f0e0337f", "indicator--a66cc27a-c885-47e4-a15e-5190b8a7d5f6", "indicator--92a85c9b-e9e9-4140-ac7a-1828f0dc1308", "indicator--4d3ad9ab-7464-447e-9e1a-b9aa53e6bfa1", "indicator--a9ae8527-9c01-40a6-b7cd-4ba9525f4635", "indicator--5ac0344b-4300-4d45-9b5d-345c8f904b6a", "indicator--242783ed-6ded-4358-a3c5-c6721164ea5d", "indicator--ee0cb1c1-183b-47b4-926d-fe65b8cb0e71", "indicator--355aa1a6-aa54-4b0d-9dde-707ea3f69e15", "indicator--6d68202f-05c5-4682-b08c-12116f315a58", "indicator--8b43c926-ef01-401b-9f66-a5b53bbab489", "indicator--e56b358e-7558-48e1-8e7a-c4000fc59831", "indicator--278675bd-1346-4e00-bd89-2fb8608ec4ff", "indicator--505eff41-84c2-4320-9f8c-4ab43f946ecc", "indicator--2357b788-750d-4eae-837a-1b7ed85966e0", "indicator--053b9912-ba3b-4988-abd9-d9cb42db3bb3", "indicator--c964a857-1dad-4d56-904d-5c3c012db291", "indicator--73710ed5-e48a-4f43-9408-3730484eb683", "indicator--873467cb-1c9c-4629-9217-f1f08085284f", "indicator--e9386664-98e9-40f1-9d8c-ba6a75e73228", "indicator--4cacbf35-f8e5-470c-a503-a79474b2d784", "indicator--e8fb7a3e-a926-4b5a-9795-75861907daa5", "indicator--cd67a3b5-e0b6-4131-a8bc-fa447a1f952d", "indicator--559ce274-cbca-4082-ad87-3bb0df83a04e", "indicator--ad2410f7-e571-4f5d-a255-26385b9f85c9", "indicator--335eccb9-df70-46e2-aad7-37baf5890d56", "indicator--ebd07820-14ad-4394-94ae-d908f1af601b", "indicator--36597bcc-4a21-4607-95ff-8dfc929e13c3", "indicator--37becb7c-2042-423a-8a0e-3e616856695e", "indicator--48bdc83a-1930-4bf4-a6db-6fa4a94ae491", "indicator--d75d37a2-68ca-4b9d-91eb-ebc52d75e48a", "indicator--ec92f5cd-91de-4b9b-97e2-28ab0c3deb1d", "indicator--53d08175-e1b6-400a-af5e-3896d1382400", "indicator--a9b9135d-19c7-42e3-a286-bd08344b6646", "indicator--7c6e2bf0-d009-4cb5-9cb4-068cf221f025", "indicator--dad459b0-3d81-4563-a43e-30d4a6ce6842", "indicator--4ab4f3af-01e6-4c55-9c9c-27b6ecffd09f", "indicator--bbd8cdae-43aa-4213-8850-73377988a035", "indicator--9153d180-4a93-4c4c-8572-e4ab25f83ea3", "indicator--98423e83-08a5-4780-8230-e3d8a617eaf4", "indicator--b39acaae-d40a-43be-83b3-ed6d2587f22b", "indicator--9bcd1ef6-d4a4-41c1-a4d2-f78e1d646b4f", "indicator--bcbf6be8-67bf-4745-8836-10358a8973f6", "indicator--cf8c9df6-b558-4921-9bf9-a8096bc64bde", "indicator--e3a07f9b-2060-4116-b40e-ce994359eeaf", "indicator--5512b63e-5958-4db8-a6b6-67e675fd4f5c", "indicator--2a9365e8-00f9-4167-a21d-d5d79601e772", "indicator--7433d44b-321f-4ecb-a7cf-3ee71d56fda9", "indicator--a4e1d8a8-ba37-4355-a8b6-d16be6f427d1", "indicator--e61fff6b-523f-44c1-9383-ffba7701b8e1", "indicator--4159c9bc-6dd0-4f63-90e8-da1d73b212f3", "indicator--c8a5f736-06b3-4479-a356-fd6bcb795590", "indicator--a1354833-4bc1-4f8d-a8c0-440b076d31ae", "indicator--95c20433-22c8-477e-8d64-a49d87601919", "indicator--335326fa-7463-44d8-9ee8-c234b0265ef7", "indicator--7cff164c-91df-478b-8bd4-1788501fa2fc", "indicator--d53edb06-f9ff-4db9-a497-6fb032a6d6b1", "indicator--2e518d08-2e0a-4ddc-b9b8-76ae1549feca", "indicator--5057f939-1aa9-47ec-876a-861b4bdd8ff1", "indicator--b78bd9b6-4722-4525-b701-84e9610995a4", "indicator--18bb7d4e-9a5b-4fd4-b9d3-7e052903bd79", "indicator--73c6d99b-49c5-4e40-820e-a3b239ed290a", "indicator--78888802-4a6e-4609-a534-8583f7e674b5", "indicator--11965610-ea1a-4adc-8c37-9b07e315f0d4", "indicator--c5847b8f-fbff-43c9-8c22-01b1ed1c60ec", "indicator--b64b1346-c454-4286-9dd9-a352ca81120e", "indicator--4b8f799b-080e-4437-84f6-c77f501c37c1", "indicator--9bcc070c-3242-4100-a98f-aec2743cced2", "indicator--59f0365f-7aeb-44cc-959f-e11fa7cf2397", "indicator--2a4c14ff-d5d6-4bbe-9041-148ea61f67ee", "indicator--6c37b809-746a-4357-9943-7f6a067ac7dd", "indicator--ae5718d2-fe62-492b-a224-0124410038da", "indicator--c6f8431d-4753-4ac8-ae87-3570819a06bb", "indicator--03e0c2d3-58cc-4d6e-9cc0-9ca19d06016e", "indicator--feaf03fe-1ad6-4150-88f3-137bcc08ad1e", "indicator--a49294b0-35cb-4d8c-8299-bca446cd0ad2", "indicator--94117968-92f5-422a-9973-bcddf296c1f7", "indicator--42d25b59-0226-45bf-a9da-38d03a8c75d0", "indicator--14419577-93f1-49f8-b333-0887633b15cc", "indicator--a1a731d1-a193-4229-b48a-39d7232cbee9", "indicator--231f3857-e7da-45ea-b393-f6624ed0c725", "indicator--889702f0-458f-4401-a4d4-36fbe81589bc", "indicator--9273f005-c94f-42dd-8d9a-a0ff0acc9d02", "indicator--0bf8da75-5c17-4ae4-96c2-b270ba853496", "indicator--af14efb5-f16d-4cde-b229-9d9a1630d77d", "indicator--2b3b40eb-1939-496b-bbe1-c9536bc8e45c", "indicator--59fdff14-77d4-48c5-acde-f8c2bd68f8f5", "indicator--de893ec2-4a43-4602-9411-596c0210efda", "indicator--f09d3c62-8e8e-4fac-acc9-aadde0d241b0", "indicator--5a8498c8-2f7d-43f9-9294-3d00f163f5f0", "indicator--76054572-20e6-48ca-b44a-82a065c3d05d", "indicator--b9b84de0-ffff-4290-97d9-f88eb4d2a155", "indicator--9ddbfaf8-ea7f-42cc-8a7e-5b7a93575fea", "indicator--7e7e2486-8aa6-449e-b2b8-a3bb0b4e0e10", "indicator--e1db4ad4-46ae-42c0-8a94-760bcc0d0f22", "indicator--4c6af098-722a-44e6-9a9a-7261bfe1d4d3", "indicator--041c3b92-27a5-410d-addb-2029f28b2e59", "indicator--2876fcde-6ba9-464c-90b3-fc00216131ff", "indicator--ffdc3c8e-ed9d-4380-bf17-804a24342ea1", "indicator--80b77ebd-fac9-4491-9d23-1d18dd1babb6", "indicator--fa51381d-7cbf-4a96-9978-c180045d1299", "indicator--a5a8ce7f-e7b9-46ae-9491-0a7a2687bfb8", "indicator--f45c7dc3-73df-4209-a65b-326ce0fc13f9", "indicator--05a41feb-69bd-433f-ac65-bd45029fb53d", "indicator--18c5708a-dbe3-48a8-9fe6-e34537327614", "indicator--c38ee87b-3a6f-4d01-a750-cea2d00130e4", "indicator--70a3b6e9-368a-44ab-84d6-4cb9c3d08992", "indicator--2a928cfd-257c-4c57-b8d2-0d8584cd53cd", "indicator--f73e13c2-676b-4296-a1d4-6fad566e78dd", "indicator--38b1b431-21ec-4930-9288-e49c00ab9fcd", "indicator--a75ec44a-6e4d-4f96-9909-535b30651fd7", "indicator--45626fbd-39b5-4f72-b0c0-464aa64d0f12", "indicator--16c92f9f-3df2-4ffb-b25f-7917276200fb", "indicator--1596d7d8-e6f3-4030-90c4-cf7ec5e4a4ef", "indicator--f7469cd3-0e84-4ed3-89b2-b3456d3528b5", "indicator--44049e8a-0a88-42f5-b2b6-61e9087fa70d", "indicator--515de7ef-3589-416f-b2bb-555d36e7deb6", "indicator--6f73eb69-06a4-4cec-8830-2b3818aaebb5", "indicator--44884dfb-712e-4149-8bf2-a82fba2c4ecd", "indicator--9b4fcef3-2dbd-4e09-b1ee-7d183f9c68a6", "indicator--428b68f6-398f-4ee2-b6d4-8f2de951e5af", "indicator--e1908e8c-2412-48bc-8b7d-9b280c207c07", "indicator--a9fda3e3-49b8-4d9d-924f-a06d0fb837b6", "indicator--c49ed072-3322-490a-b630-e5e76a7d83ad", "indicator--89b3536a-f708-48a6-88a4-f50cbef4345f", "indicator--851cb1f2-9720-41a5-a2ed-0c66532520ab", "indicator--3cfd778e-c390-4493-9beb-fb6ce2972035", "indicator--1ef6fd66-eeb6-4d58-9dd5-326bef19a46c", "indicator--4db19c15-9767-47b0-b94c-f1ac85d014d8", "indicator--c6fd872f-55c4-4de6-9dc9-44d427872fb2", "indicator--d9828b52-4afa-477d-bb95-cd8b008e1417", "indicator--7da724a6-f40a-405a-8200-3c5545064c7d", "indicator--fbc78c38-45e8-436a-9415-a99bcdd43d8b", "indicator--ca2c1e4f-35d4-47a2-b1bb-1dcc0ae2a992", "indicator--0d9b19f4-37ee-4c57-bec7-1dd7d2198560", "indicator--2d5c312a-fb05-41cc-a6c4-82d8fbf66fab", "indicator--e2329ae5-7ed9-4475-b905-a73ae4d2f275", "indicator--94a1e2cd-d662-4d7a-8e17-110ee055cbb8", "indicator--1f2ed863-54cf-4721-add3-6cbe1e33afaa", "indicator--ec95c235-1662-4327-90ea-eccd1c0fc6d4", "indicator--66670680-57d3-4d3d-834c-8eee79cd81d2", "indicator--a0647f7f-59e6-4882-81f4-610c9efe504d", "indicator--a72350ef-2743-4a00-ba2b-47239071f5e4", "indicator--d7feb252-168e-48f6-92af-7bc271c14270", "indicator--5fa92e9e-9b66-44fc-a5cc-44db7aabf394", "indicator--d665061b-702a-4dae-90dd-352bac760af1", "indicator--52f48c88-419f-4d9e-b67f-3f42fd20dbed", "indicator--a54da8a3-9a79-466f-a5d3-f8312d35360d", "indicator--5d1f8126-b77f-44b8-aa00-148ba5498784", "indicator--62b039fa-e66e-4eba-976a-539a8f1acf7e", "indicator--1f400566-9bfd-4f9f-9c67-13169c3edf9d", "indicator--1930028d-5cda-458a-8566-46755e98c345", "indicator--fd9fa83b-7d1e-493a-a573-560c9ad258a0", "indicator--402b1dc4-09c7-4568-bafa-d3f205e98b9a", "indicator--a88944f5-ab7f-4707-84ce-66fc0aa02b47", "indicator--11fb7173-117d-49fc-9284-43aa5f6d18e6", "indicator--59f144b4-e5a4-4a5a-b2d2-0105ae574ae6", "indicator--8ab3a480-7636-45f5-a38a-cdfc20b93ed1", "indicator--d7edf046-7965-4780-bf02-a0185706d979", "indicator--5ecf7c55-9fa1-4b67-9e23-5d12981d9079", "indicator--f6bfe30c-968c-4455-9461-f3704a73758d", "indicator--833ef0c7-44a3-4d5b-a0a3-51d30c5a3e76", "indicator--7623429a-1c03-46dd-aca7-5af66009011e", "indicator--2c07ef4d-0498-4188-b90d-cbb4bc921811", "indicator--1f3a3242-8b08-442b-8656-fe14d6193e48", "indicator--081bbc0d-4d59-4a29-b0e9-ec1ff7485862", "indicator--25ff3ef9-dd0f-4aec-9c05-066da04ffdeb", "indicator--077b098f-ed17-4c90-a7f2-016ba22d8c47", "indicator--997ab247-52f3-4a8f-8b07-f99e705146d6", "indicator--47d096c6-7847-4716-bc94-ef817df9ccd7", "indicator--4ca69e74-01e4-4dc7-b7bd-b545da63ddeb", "indicator--ffcbd3f5-9513-42ec-aaa0-37ff3eebab0a", "indicator--aa55de56-cc3c-40a8-9ca7-a1edda81279a", "indicator--46ca5805-b551-4d42-b1a4-d0d8107ac19b", "indicator--6e0354a1-2393-4a3e-8d1f-3ab224a839e1", "indicator--fd64a54b-fe0d-4fa4-831a-67d7ef82bc60", "indicator--84517240-bf00-4fcf-906a-73672259d8ab", "indicator--9938085d-02d8-470f-a5ff-00b3d71ed01b", "indicator--e5c4da8e-61fa-42c7-9a8b-0b8ecf81fe16", "indicator--90fef33c-8064-4700-8088-7fee2e94dd7e", "indicator--d797fae6-3274-4829-ba5c-1d5bae3587f5", "indicator--bdbe82ee-0246-451d-b540-bd67c9e7f21c", "indicator--0311b832-5038-4902-8032-08341658bc58", "indicator--18820b08-89b5-40af-ad70-86e59ed529df", "indicator--e7434798-06ed-4aad-b0c6-ffa3d7eaee11", "indicator--7c21d8bb-363a-4a75-8b68-01a4fdf2dd4c", "indicator--9ac6f124-48c3-4c15-9da7-3fa86401e216", "indicator--869f569c-73d2-4bf2-b3be-e8a187f6e2e5", "indicator--2db83112-1f38-4fbd-ba77-09140058dc85", "indicator--36d6589b-3029-49b2-9e10-489631c0ce46", "indicator--09746390-cd2d-4abf-8f25-b08e351151ca", "indicator--92694994-8e1e-4dcb-a0c7-3a91d39edaf7", "indicator--be7df074-303e-4d4a-83ed-f51802ab3365", "indicator--83974b61-a85d-4576-b151-8a84e6f7400c", "indicator--c3d85f77-ac33-400d-aa48-e467bac6d426", "indicator--d32db64a-c3a5-4a85-879a-74e7882bc843", "indicator--a15879b9-7f4e-40ec-9134-cd45e6529556", "indicator--b95beac5-3654-4d1a-9ba8-f5dd3c0fa5ea", "indicator--ff4f55bc-3026-4b7f-8725-472b45edeb8a", "indicator--72edf3b4-7944-43b1-9e7d-520d3613d616", "indicator--7351ec67-78c1-4a27-ba55-d7a6097fe36e", "indicator--b4f7d56e-5405-459a-a1d1-3caa4346427d", "indicator--9908bf92-85f6-4cb9-b205-299f8482311e", "indicator--78dfae7c-64ae-471e-9ef8-75f5d2732b68", "indicator--b400feb7-2f46-408b-b698-dfba46acaada", "indicator--6148db8b-d1c2-4ecd-8a3c-38d99d562444", "indicator--22619a4f-aa5a-4ce2-9476-c4bfdb32614a", "indicator--f269ca52-8d13-4d1a-9665-ff287d90a9df", "indicator--a28df1e3-594a-4036-81ae-986d2bbd6a22", "indicator--72b81c60-533b-4d3a-9983-7c48b290df09", "indicator--196973f7-1151-481e-a3ba-aeab0658c3b8", "indicator--473a63f5-cd00-4f1e-9277-d6cba1ccf4bd", "indicator--45fd253e-ceed-492a-8f00-ed0e09d121e8", "indicator--efd282db-3899-4cf5-93a0-f3eed56443ea", "indicator--b7b0c49e-abb8-4f6b-979d-9144833e4371", "indicator--994d2274-b19b-4a66-b12d-a3e54a2a2945", "indicator--2e7e83ab-b5d0-4e85-8f01-e59e5342c8b1", "indicator--b213079b-e2fc-42ba-94f5-62a252784049", "indicator--b64cbff0-8f73-453e-822e-1f43fa9da527", "indicator--a3b84664-e717-4f9c-8d9e-d549d7304817", "indicator--4264184e-51b4-46d1-9afd-f0330c50f4cc", "indicator--42a4050d-4f78-4874-8d16-b29965120aee", "indicator--16b964d6-ff57-4d41-9b24-a64585eb2c24", "indicator--98e09fe0-7f2b-4867-88c1-4dfed57ae9eb", "indicator--d42a9db0-926a-488b-b5ef-1d6fd0e58e9d", "indicator--f0815564-37c9-48c3-8633-47e909016e83", "indicator--87bea5d6-d049-4169-8ccd-ebe6e7a1d615", "indicator--69e16342-8833-4400-9ab9-b838a95bab7b", "indicator--03af41fc-0d73-4cdc-8ff2-73f68b311a37", "indicator--515df93e-8dbe-44d8-9792-2bf923961c8d", "indicator--05a50371-d07c-4fcb-848c-306a78d09c23", "indicator--04019033-1c52-4aa7-8f81-f4ed96d206bf", "indicator--27000567-55d0-42f6-870b-f7c35d5bf6bb", "indicator--47d8d59a-70db-4974-aeab-0c894d8707e9", "indicator--3201475b-9f77-4991-a99a-c37decf62745", "indicator--ac6b494a-5561-4a1b-a88d-168b61168714", "indicator--ca06911d-cf06-4a90-a72b-6d122f587aef", "indicator--4681e2ee-7b7c-47af-bbd4-95fe4b676233", "indicator--df8d5b12-15ee-43f3-a01e-602369429172", "indicator--4058f4c8-27fa-4b12-be1e-ef2313b5e014", "indicator--33c89744-4f1e-4fe8-80fa-e858714b513f", "indicator--b6f99f7a-889f-4111-9086-6f4b7ef440e1", "indicator--d385a3f4-4baf-4a81-998d-67fea825cfe3", "indicator--a3340978-81bc-4dbc-a53d-b47a51f4ae81", "indicator--ab2f0149-4846-4efc-b667-ce6844e31a31", "indicator--1b08fa60-7957-4ff4-a830-5288531f6b3e", "indicator--c6fd6a61-8dd7-43ae-9731-3564e4525b0c", "indicator--42a03f49-66d4-4974-a917-ad906cf783a4", "indicator--a000033a-6e7c-443d-9bc7-60e9fc0b1948", "indicator--fb453790-38b0-480e-9b3c-003e0da653bd", "indicator--dfff3d5c-8f99-439a-8e78-5aa59d57ae2f", "indicator--1864156b-c071-4303-9672-707fd495ae13", "indicator--75d38df2-aa86-479f-8d5b-610068fb241d", "indicator--96bb69bf-a1db-4489-bf3a-bc61c6f7a8fd", "indicator--ed6b5461-d029-4670-b4d8-03f4354547ff", "indicator--c9dc444d-2af7-4711-a67c-412144598e51", "indicator--9410c1a6-340c-40e9-89f0-3a57990aaa08", "indicator--f8acee30-f6fa-4e28-bb4f-a5926faad49d", "indicator--2a7742ca-be05-4993-b27d-b1991cae4c4e", "indicator--d5efbc1a-9b8f-4b04-9b7f-ad68db63b1de", "indicator--2f70b25a-ed79-4452-bba6-555b1e8cd113", "indicator--21984cfc-e809-4b89-9f7b-d78e539b8d70", "indicator--3ac6194b-06c1-44ca-9d79-c91f4d24c12b", "indicator--8f732b4a-1e8a-43e5-a126-2baf36a78077", "indicator--6e136d8d-56d2-4dd4-9ef0-6175db47e271", "indicator--5f06be14-aa6c-419d-b1cd-ceaa15db9364", "indicator--3ee9abc9-5ad9-4fe3-b6cd-b2b82d7a46e7", "indicator--914f3ba3-8230-460c-915b-37e9c5a624db", "indicator--f1bd28a9-7a98-4de7-9c22-4bef8537d2c8", "indicator--4448c589-0339-4385-9e64-d4d79b96237a", "indicator--69c37e4d-0375-4bc6-a43a-7195c6b95155", "indicator--d942e32f-7a2d-49cf-a21f-9f772d06ee1f", "indicator--ceea0079-8fd6-4d09-978f-7ddbe10e1183", "indicator--19cadb3f-c261-45c9-8e32-167fc901c449", "indicator--c95c0fca-ac39-4f81-8482-2f507154de53", "indicator--d46ca97e-f53f-42f8-b1b7-5662b19ab9ac", "indicator--56bb3402-4082-4105-9615-847ad4c3db06", "indicator--1b37f545-ae80-47e2-a038-d41c32c2f790", "indicator--5258741e-7273-4281-a1a4-bc76ec8110a0", "indicator--634638e0-6129-40f6-860a-ca5e2bc09aac", "indicator--6f6a85a5-8be6-4d5e-9748-d7eed0513021", "indicator--344eacd6-e45f-41d4-9453-e47c5aa79a0e", "indicator--af1bb34e-427d-40e8-aa02-407649ac5e32", "indicator--05110000-e05f-4426-972f-ee0a2ad044aa", "indicator--6daa18ff-cc09-4cb7-adfe-83fd6b96380a", "indicator--de99ace6-04d1-4a6c-8dd9-9aa488e695dc", "indicator--dc10d9ba-31e9-4fd6-9ed9-2b56a2862801", "indicator--a76bf906-c7f9-474d-a6c0-6dd997f9d6aa", "indicator--11097dfd-c24b-4f3e-9853-b8182f7dae94", "indicator--eaf19aad-3f3c-4a4f-b246-5983532a6c1f", "indicator--bcebc23c-83f1-4f6c-858f-06bcc5b68af6", "indicator--d737ea06-2b5c-433e-a253-06becdf38857", "indicator--861dc3ff-fe94-41af-a5f9-55bfc748b5f8", "indicator--16cb532f-0dab-425d-889e-8e10c6b79f68", "indicator--436d36b6-d8e9-4170-b936-140231147216", "indicator--1d0e3699-ad6c-421e-83b8-20380c57b62c", "indicator--bfad18de-653f-41e5-a4fa-9d6ea359309f", "indicator--e4452ce3-b986-477d-b6a0-ad177aa8caf8", "indicator--5ffe78d3-0b55-4332-b3c5-4d910bbf18d9", "indicator--5244722a-1c71-485a-b6ba-fd062a0616ed", "indicator--b67ecbc6-1fb1-4b0c-9c1e-41f53c82968c", "indicator--7b5ed537-c3df-4d09-9e09-789c416fad39", "indicator--9dc1ceb7-99f7-4012-838b-05fb1f4a29f8", "indicator--774b2984-cb9a-404a-a699-838e46b89709", "indicator--9358037d-da94-4f10-b8fd-6a642261b86d", "indicator--1565f607-4047-476a-9167-48c7e0d8cd52", "indicator--33771f04-0f55-4a65-841e-0ec1c5cbdcdf", "indicator--afc65c47-3ef2-4454-b0dd-e2e718eb72cb", "indicator--7eb017b0-8897-436f-acf8-541ef0556877", "indicator--d601bb24-1301-4519-b3a2-850c1de40b72", "indicator--01e55b44-3cb6-4bf8-8792-1b6f311cbdf6", "indicator--fff700b6-4122-4839-8004-94d2d0a43c43", "indicator--64ca6266-7181-4808-9b09-e9085fbb0814", "indicator--efdb47ed-ac15-4ee1-9883-d03e6485f809", "indicator--3f517f9e-6594-4790-824c-5093e3783d63", "indicator--a035cdf7-963f-4785-b851-5899f0809b78", "indicator--5f8af2d0-b3ec-4c09-b72f-31bb7d3cde08", "indicator--e7eb5850-274b-428c-87e9-007318770a80", "indicator--057127d0-9fbc-412b-86a5-d61ab16068df", "indicator--cb937ab0-2386-4327-847f-0b31171fdf31", "indicator--d5dccd84-8a05-42d8-a165-6ec0d19bcb65", "indicator--9efc809b-e0b9-4a51-bb3b-d6d89e6402c1", "indicator--f6f37902-c73f-460d-aae9-2aec33fb3143", "indicator--bd30e08b-eb92-4489-a8df-2e1f426506bf", "indicator--083d5f77-d350-493e-ae28-528200af0dbd", "indicator--b33aafaa-29f1-464c-877c-95025a138a52", "indicator--11ee5fce-73f6-4060-94e0-3282d0096a51", "indicator--5be112dd-6a0d-4b24-b07e-708e6e0edc4c", "indicator--6b970fbf-3691-4678-9429-c8d4b697a2fa", "indicator--a77c9c70-3e90-417a-b49e-d40c06501aa2", "indicator--0bd9669c-964f-4ea3-aea2-e92c2b1694fe", "indicator--d04f993d-fe24-4817-8a84-2bd23c1565e2", "indicator--f4518adb-ac3e-4c0a-b041-8104016eca0f", "indicator--f3dbc8fc-63eb-495c-a2b8-104858a48536", "indicator--7c76a76f-fae9-4f14-a686-9dcbc1bd46a3", "indicator--31d63d04-ea75-43eb-b865-f60997d682b9", "indicator--dc3a2943-56c8-4e4a-b2d6-71ead61f56da", "indicator--1a5bdedc-ae5a-4a46-a5bb-e95e6eaa7f7b", "indicator--d300f697-ba8d-421f-a1d7-2cb7c79b99d3", "indicator--2da31e67-956b-4c45-a490-36f059cd7015", "indicator--c1af390f-db3c-4a61-a4b0-5954022a6141", "indicator--8128a9e2-9c08-424b-af84-10138ebb5e33", "indicator--78580164-bf53-4c36-a3ab-31b73b94c4b5", "indicator--9830ee97-9d5f-4f80-a2e4-53225b460c1d", "indicator--40ca7799-b4d2-4cfb-9342-12e2a8ee1706", "indicator--9978f33e-40b3-42fd-a9dd-069b59dd68c1", "indicator--5e5844a7-db6d-4314-8279-395145e4f642", "indicator--5a9aaf70-9f28-4754-81a4-f3d1ac8485ab", "indicator--c2026666-751f-46fc-9694-efef5c1b832d", "indicator--9ab17cb5-446e-417e-9300-8e3a92424623", "indicator--3deb0ab5-2cd2-4583-94ec-5520e24f5b0b", "indicator--8814e142-c5d5-4f8a-9a74-af510d226f68", "indicator--4fd86e89-70a6-45f4-a431-f246a50922c2", "indicator--b95effd7-aea5-4562-91eb-57dd99671a68", "indicator--5a130b93-5501-4506-a7fb-d2cbd5f6d46c", "indicator--335acfe8-b768-49cf-ab9e-6a4f7db7ceed", "indicator--bcc00649-839a-4edf-af72-3e835cef5cfc", "indicator--4cd4c903-b496-4c3c-8f56-d42f527253a3", "indicator--a4841956-5976-49d0-aa95-f0c4751c89c6", "indicator--6cf5c1af-93bb-444d-aa02-24bf1c53180c", "indicator--8458a2b7-42cc-4609-8e11-2796ec9d66c8", "indicator--e0207938-ad24-4e12-b9c1-6338fb5256cf", "indicator--3c4c9bc0-36de-44c7-89ee-fb4fb504cc67", "indicator--4498151f-b6fd-4aa5-a65f-6ce6b8fb86bf", "indicator--778eb9da-7242-4309-aa1b-02758915bede", "indicator--14d2811c-f3cd-4913-9040-f09573212ec6", "indicator--e6b17216-2e63-442f-857d-e6980100c8a8", "indicator--ce2cdf01-a8b6-4f37-bf06-93b21e4e6874", "indicator--a321396b-9be1-4756-aa38-8c3ff38958f8", "indicator--03885d5b-7402-4411-9fa9-11c057a2c9d7", "indicator--80930f14-9a5c-4049-a13e-fd1788595a9c", "indicator--f86ca20c-447f-4eb6-ad4f-09e572058647", "indicator--ede549fd-9e89-405d-afae-72ff1f67ad06", "indicator--f5d3d46c-762d-4dcb-b17b-8c86a32bca3e", "indicator--a17704ec-3f4e-4917-82f3-0bf58dcc2bc2", "indicator--010d9690-ed80-4ee7-96fa-c8aeda2046bc", "indicator--7bdd366b-7061-4d20-a4e7-bcf60a0da9e6", "indicator--1a4cc8a8-01af-4426-926b-ba94ef033a52", "indicator--4244254c-71b9-4770-9d5d-e0504e87d3ef", "indicator--ea997460-c481-4192-a29d-d140678cc3e7", "indicator--3f7e7d78-9e5f-4899-9524-c7d600904b78", "indicator--65370f3c-e277-4818-add2-715b5d6dddf8", "indicator--e1c39dd4-0aa5-496e-953a-929a2c1b1f3f", "indicator--12b5b9b5-bc38-4d5b-a2d8-aac48f0fe4d4", "indicator--1199299b-d5e4-4293-86c2-15427edcfacc", "indicator--139dffed-ac68-4297-9174-639b59ccc185", "indicator--d96e26f3-6005-488d-a9c1-94238435bca5", "indicator--ff527665-2043-469f-8248-8e7a6913ccd4", "indicator--8570c319-c421-4d4d-b6a8-5597da1b658b", "indicator--e0008783-1ab4-4630-950d-75c3a35945f9", "indicator--c8160d3b-2da6-498b-9a9f-0a013e50e924", "indicator--a3a872ee-852e-4a0f-94a8-5933328cdf7c", "indicator--f3069094-f10b-4f6d-b057-b77edacb738f", "indicator--40457af4-0c5a-4511-8080-c631af6961ea", "indicator--6f35671d-9166-4829-b2aa-7a51edc12b35", "indicator--f2c9e1cd-dbc6-4a66-b782-0a4c2dea1265", "indicator--1340eebb-859a-412a-b0c8-c41b3820b421", "indicator--1b0f6843-34c7-443a-8d86-b0caabc9efab", "indicator--ff379b71-9693-4bbf-bff3-1ca5d6e0387a", "indicator--e1b3aa1b-d3c5-4074-b3c9-13448db5e39a", "indicator--5cb5502e-6d4a-47d0-9966-4c28f656baa4", "indicator--bc7f3ad6-7e44-40af-9ba4-7cddff3b91a1", "indicator--49aa0893-3c97-4fb4-a76f-31199bc4466a", "indicator--ef7db926-ddaa-482f-aa88-1c8d2f02ebf7", "indicator--0a3a726a-158a-46b1-844a-c991418f60cf", "indicator--f97e08ff-a7fe-42be-8869-8f81334b2d6b", "indicator--f4e2f70a-5311-47c0-a54f-a395b071e5c2", "indicator--6aad428f-8b94-4dad-9e10-2cc519723313", "indicator--0bd4c94b-14f0-48c6-b180-c6613d902503", "indicator--f4a0981d-90f6-475e-995b-1cb64e03cd27", "indicator--9825af54-3b30-44f2-a582-b6c156cd1cc1", "indicator--67c01714-468c-48cd-8f46-62ed7e57bced", "indicator--55240736-89e0-42e0-b798-21e8e18eb32f", "indicator--13d04b2f-e2c8-4859-93ca-ddcbecd156a8", "indicator--d147bf26-c96b-4b01-99e0-85d676289ad0", "indicator--c8cc790c-a3e6-4554-9057-2690022ec65c", "indicator--7d02fb2b-65ed-4665-b7d7-64a8af4968eb", "indicator--5967246d-4096-4fb2-b3a8-67a485ea51a1", "indicator--63f14867-1690-4a9c-ae54-1b00ed36b834", "indicator--63ade79e-08cf-4c3e-acdb-542a16ac7405", "indicator--f285b1a6-8bde-46b5-b0f1-0b4e58a9a7b7", "indicator--9a18c232-c2f7-4d07-bedf-342da3e26945", "indicator--e485f32a-1826-46ce-a399-ad2283a95ad6", "indicator--21dcce0c-8d02-4c98-bbef-5c8fb5c25177", "indicator--f0cb5b45-4a1f-4948-ab81-ec8691dbab01", "indicator--17179c06-4c71-43aa-8eee-92782c101b88", "indicator--d212ac53-d8f7-4b68-809b-cafc896b48de", "indicator--e5470c49-95cd-456a-beb2-5ca28ca995af", "indicator--5aaa0698-6f00-4640-ab0f-9b757b329bb5", "indicator--f40c9387-dd83-4046-ab7e-e506ded30831", "indicator--ebf7e724-e68a-41e4-a4fd-24f877ecd571", "indicator--20705f94-e488-4f3b-9af6-108b8897dda8", "indicator--9ea2e637-97e1-4858-b352-0727ef7fdac0", "indicator--ed412104-4408-49be-8986-da8c3fce081d", "indicator--1b7e94f2-914a-475d-ae52-bef9874a0f56", "indicator--c5b8fee6-3da7-4d28-a1e6-cab07298b58c", "indicator--a82c0c57-1007-499a-ae49-4a0e57b1e479", "indicator--df5d5cbd-1d92-4eb7-99ac-8de8084f568e", "indicator--175b09d5-b1b9-42b6-a5f1-d0ae891b6be6", "indicator--8030aba7-3a8c-4ebf-9160-4071bc21d82d", "indicator--720afa68-d300-491f-9b22-28eb25f56dfb", "indicator--94416de5-bccf-4d8d-9b85-b2543a3add64", "indicator--a051ab2d-4a5e-4a89-89f5-25f4c6ad04c8", "indicator--b54ac6c5-d12d-48c5-8ea7-e85cb01ba7de", "indicator--74dff32c-d742-41c9-8aad-e4919dc5320d", "indicator--646543bd-96e5-4d75-af43-cb1b72e16e79", "indicator--d96fba71-19e8-461d-accc-bddd3acaac95", "indicator--34996bd3-8be8-43a2-b5ea-53f1f712d388", "indicator--c619db7e-fd86-4589-ad8e-72775447f5e7", "indicator--496e037b-a2ef-423b-a67c-08bfe76066db", "indicator--f210267e-a52d-44dd-8914-23cd389aeb84", "indicator--88c05fa2-a9d8-4daa-b191-8f828d7956f7", "indicator--3bdec2c7-1536-4846-839f-f54560a2dd80", "indicator--5549a6b5-1e8d-4b52-984f-d75c8cfd90f5", "indicator--e2821770-cb22-41f9-a07b-9383b81d054a", "indicator--6ffa1a05-9b67-4ef8-953e-e15ef2a6f1f4", "indicator--09803577-948c-43cc-86ff-c01fc2fed906", "indicator--f3b0557b-fa1d-44a1-8939-4cbb314a608b", "indicator--10f69709-a1ba-4258-bc81-43914b54149b", "indicator--9831d8de-27e3-4845-8029-b6d2b27002c0", "indicator--eb0c6c34-ff69-493a-a45e-392357c102a5", "indicator--638b5f7e-1585-4309-a5aa-5ba3d97524fb", "indicator--7cb3a446-9cee-4ffa-958f-8af2650b83d0", "indicator--b29b8e38-42e4-4522-862d-e2d48836d5d7", "indicator--475a4155-638a-4a7d-a6b4-f0fb0b640e4e", "indicator--ab0d9f0e-eade-4813-b9dc-e928296d0eaf", "indicator--651cd632-2078-473c-94e7-5c1c261dcee4", "indicator--00adfe34-906c-45d6-b21a-0465fac0c3ee", "indicator--b1313a4a-55ae-4468-86d5-1b2269fd50ff", "indicator--bbb75f56-4b8e-4651-b2b0-110536f5886e", "indicator--212442e0-59a2-4ce1-970a-163e945cafee", "indicator--d5866b90-48ff-49c8-b888-38aed42397f2", "indicator--0f9960e0-08b6-4b46-93cb-5e56566e41b9", "indicator--cfeb80d2-47cb-4459-9f82-d4871561a5e2", "indicator--70adefd7-1fd1-4a66-8bdc-784036c46483", "indicator--db526837-d107-45e3-86ad-4a20c470e3a2", "indicator--7d40147d-3be4-469a-8a3d-57728c8f40b3", "indicator--2b939e71-0b55-4eda-85f2-46564b6d8ec4", "indicator--e42924f1-a169-4c9c-9e81-1799b0ac2661", "indicator--fc71ddbb-cdc3-4182-91eb-f37ae43f1660", "indicator--7dbae8c7-3f2d-4cae-9152-2161681a21fd", "indicator--8beab7ae-812a-45ab-9193-408149b354e2", "indicator--3be30b35-c642-4d86-968a-bf29c8d687f0", "indicator--077bd26d-6802-4a85-9985-f8185f9ae812", "indicator--fb1dcaae-37c7-4536-ae46-52ce423495f1", "indicator--9922467a-c779-4a22-8f12-128e585d26f3", "indicator--a06de36f-2e7b-457d-ad44-1e54feaa4832", "indicator--39217730-9daf-418a-af59-6e35fd66ef6a", "indicator--1eedb884-770b-4428-8fe3-db8300d44f12", "indicator--ad4584e6-c57c-498d-bec4-817600297245", "indicator--14e64bfd-cb0b-4d9b-99da-f5829cdb22b1", "indicator--cdf04c1d-0e26-4ab5-9dd2-4dcbd83fbc9c", "indicator--da16ad41-ccb2-4ace-afcc-767fcdb76072", "indicator--e45d011b-85e4-4123-b1f2-0186d1e08699", "indicator--a55ffb19-aa4f-4d4f-a9cd-715348d1e383", "indicator--306b1c9a-5b02-405a-97b5-bb7b13cf1b1a", "indicator--69d16f31-338e-4563-95b4-3ef9af35fbf4", "indicator--09d1b744-ce65-4f7f-9f87-013034e4ab4a", "indicator--8cfc9886-bf74-420f-b1f9-dde4242d51dc", "indicator--46efa445-b2bd-4cf9-9d51-592458cc7d3e", "indicator--3f056c51-dcb7-4fae-a0af-8cd06246f539", "indicator--f7f82038-55b9-4155-b247-68509e9c6143", "indicator--f43e5e97-2f87-47d1-a8e3-299f4c014c87", "indicator--c8eccd2f-2232-4f7d-8817-5699a17033a2", "indicator--b06f6f36-9aa6-4fed-b85d-f99c8d02c00a", "indicator--7f4247b1-c679-430d-83bb-c9e2636fdcf9", "indicator--c5d1fa8c-92cc-474d-8033-38a2ec5432ab", "indicator--47c3bb28-1a29-49aa-b7b8-523e911a86d3", "indicator--bc90f1ef-74db-41f0-83a0-43935f3cd853", "indicator--3ee6c346-3a72-4476-815b-1c4aca587e81", "indicator--82d665f5-e18c-4281-b892-c7cc7633d016", "indicator--bfc27ab3-2d21-4ec1-ab50-f69b2f092026", "indicator--18d2315a-cc3a-4dd6-8582-601b656ab1df", "indicator--cec99d2c-50ce-4763-9501-c9f38bc8af7b", "indicator--9c34f05b-9305-439b-bd18-c45b32068bcf", "indicator--27148e8e-c929-444e-8d9d-abae65d24f55", "indicator--6891b595-d255-482d-9e8e-73e05b9a1a23", "indicator--a6b677bb-6c7e-4680-8a32-d8c0bf8bea05", "indicator--408f11c2-c810-4f80-b97e-7abef3c10780", "indicator--88a49c47-5ce0-4974-8fd7-a45280e5e969", "indicator--16d02048-c069-4fc8-9deb-c984078eca8f", "indicator--20d044d2-c9c1-46b0-a728-d41fe2d59de6", "indicator--719acdb1-428a-4ede-b79d-c41c05e73739", "indicator--7ff47b6e-e659-45be-ba51-f5e8514287a7", "indicator--8a62fdc4-1772-413f-9eae-d5c09f39a579", "indicator--b6e56ee6-74fa-4ca4-b7e6-c1083f770155", "indicator--4db1aa26-ff31-449d-ae4a-8d51d02cb32e", "indicator--1305d2ed-31f9-46bd-9203-c007f3c25e7b", "indicator--abed973d-4692-41a7-8363-391b0e61fc66", "indicator--38926a16-2400-4af0-8517-7eebcdf68270", "indicator--ded0f54d-1cd5-4f9d-a8ab-79471bc4a799", "indicator--956e5c37-48a2-4083-8b5b-1036dff53b31", "indicator--ff705482-5804-4c0e-a3a3-96e04c01356d", "indicator--f7f750da-49b6-4d1d-8565-d50535dff565", "indicator--3c4dbc44-9b6d-48d3-95aa-e828ed55aad1", "indicator--dfd7101b-ccdf-4e86-a8ee-a5f262a8c604", "indicator--c2451b25-9079-4f0f-9faf-bd4ff9a28be4", "indicator--a7335b06-6176-4384-950e-0f3cffd0692a", "indicator--40487e67-fc2d-4e13-95ef-6adceac516f5", "indicator--01f72cd8-4284-487e-a055-6862941cecef", "indicator--84c9c6dc-f3d2-4e20-8040-6ecdf5bcd3dd", "indicator--5bfd2024-176a-46a5-bded-57179bc20046", "indicator--52982352-31d2-4af7-be85-6b7243f119d8", "indicator--b54170d4-f1de-4e08-b28b-2882c0928df7", "indicator--007cd4b8-4d00-4246-8251-24d502f82a0e", "indicator--dba6d2a6-832c-44ed-bc51-5afe6b6f49ab", "indicator--ea5c24e3-6e65-4ac0-bc6d-8e7e791a0108", "indicator--bcad80d1-a5c9-46aa-88b4-140f6a3446e4", "indicator--ce493ae3-a06b-48ba-884c-5a776098a45c", "indicator--27aad664-6264-4cec-b53a-8a9be4fb24b3", "indicator--a6950c37-f6f3-4c22-9182-359aea23384d", "indicator--c959c468-1eba-4e05-bd82-798f2e01b377", "indicator--69d54fdf-f754-444e-a50b-d59881ed492f", "indicator--b992fa88-9528-4594-86ba-f9785500bfa4", "indicator--cb3d280e-fe92-4ffe-9a55-d086aa527eb1", "indicator--8c6b379f-f2d3-4190-9bf0-d8a5a3388697", "indicator--e2d889d6-65dc-46bf-9d29-d308c65e5a2e", "indicator--a15e29e0-91c9-4f65-9906-36f9bd3a7f13", "indicator--71793dc2-85bb-4952-a0a7-d572af0d038d", "indicator--a5e74368-d948-4e81-bdc9-3cf81263ee14", "indicator--f3d22de1-ebdc-409c-b556-6fcbaf85f6c8", "indicator--79c52bfe-35e2-4928-823b-6306053bc4b3", "indicator--41bd1f99-6391-4a2f-8000-1476c60adbca", "indicator--26f50d9a-4792-4b57-be0c-4d572de7f176", "indicator--907083b0-d23b-4ae4-8909-de22776f34ad", "indicator--2697b4f1-5914-4332-a1b1-9f0217881c7e", "indicator--ab95085d-08f9-4bef-9ac6-7948556d0167", "indicator--9228d0a9-492e-4173-9b64-0c38dca3a791", "indicator--329d19b4-8bda-4765-8d5c-2146a76d6462", "indicator--375aabce-d7a8-48e7-bce1-f429de184be6", "indicator--647f334f-9cf2-49b2-82e1-48e68636dda9", "indicator--4016f153-7aed-4d96-bf42-629db83167b9", "indicator--4f8f6f12-2eb7-4eea-941a-883bf70adaf0", "indicator--c4de0453-f2ef-4f2b-a3ae-be73e520b8c6", "indicator--d3d69e7b-1202-4d6f-af62-cc0d41d68d1a", "indicator--ddb37ed8-e87e-4535-b3e3-abc808fe9845", "indicator--c3ba9a4d-1029-41c1-af7f-11bc8c8ae6f4", "indicator--963d78b8-27a0-4f67-ac98-8fef2afe99ea", "indicator--3ef442c0-e4e4-4a90-8620-3fd8ca53ef27", "indicator--b6c8bc89-a19f-41a7-b646-36591bb68fa5", "indicator--3a992d48-a4c9-4c64-80f9-c5e0b8479567", "indicator--84da9453-e7f4-40a7-9067-7c2a42859c92", "indicator--6727505c-45f8-4ace-82c2-5fbfc23f4b8b", "indicator--7d615ca9-79fa-457b-a243-03533559ea02", "indicator--b78d8358-e08a-455b-97c8-b3484c29a2f5", "indicator--d3be944f-755f-485a-8a3b-cf638a6297c1", "indicator--3d5d5ffc-2cb6-4e52-b500-76c366424c8f", "indicator--daf6edd4-3f52-4f55-a47c-fc822a7746b8", "indicator--84c0a42a-1029-43a7-bdaf-fc1e71ff8feb", "indicator--e7bd4d57-c9fc-4852-bce4-e8d1bf4275f5", "indicator--76947eaa-8778-49d3-8d62-eb090f1c5eb6", "indicator--b4602910-6ecd-4c8e-aeb3-a08419819d03", "indicator--e8f0efa7-ccb7-42d7-adfc-e230a489f825", "indicator--3c1de2de-4200-4395-89e2-801c4d2cca8a", "indicator--d1a18534-04f0-4b20-8746-117215e6cdae", "indicator--9e2a4128-5af8-4157-a780-edf83ec16951", "indicator--3f0ad75c-c744-458c-be97-af675bfaa4f2", "indicator--ae786181-c3ff-43fd-bba0-fb5a7062d0a8", "indicator--6d21184a-2522-409c-bad3-3d74b60e4936", "indicator--589b8117-2573-4091-bed5-413be6f14e5f", "indicator--51c3471e-4351-4560-b9dc-4da26e724cbb", "indicator--af95fd52-c3d2-432e-9335-7081b25444f3", "indicator--ed1b3a8c-6817-442e-b8e8-5cc02ac695af", "indicator--67a6e96f-82c4-45ee-ad97-bc49104929d3", "indicator--4bdd013e-9155-498a-a125-6dd827f1f6f6", "indicator--663b8bf0-db23-4671-8548-5e5ff17f20bc", "indicator--5adacf47-5170-4b38-b015-f557153a7ab2", "indicator--529ead80-533c-459c-9c1c-c29aa8d7dafd", "indicator--947821c2-f120-47bb-bbbc-b2371c24e069", "indicator--756367bc-c278-4f68-ad16-1921d2c0e6da", "indicator--2514addb-4a9d-4ce1-9f14-4dbcf705a5e7", "indicator--91b4d4b9-92cd-4400-abb8-2d355998422b", "indicator--4bdfb1f1-2e60-40c8-bcaa-e25d6cc62ee7", "indicator--6574cdb1-1b37-445b-bba8-d833bac59312", "indicator--47fe5671-766d-427d-aca6-f749444befad", "indicator--13b9a055-147e-4708-8159-5360e2d4d972", "indicator--419c517f-5d07-4b54-a705-3035561256ab", "indicator--adeea02d-1acf-43a5-a409-d533aa7e32d4", "indicator--768e5bcd-e1fd-4866-8049-1d264f453b1b", "indicator--ab53d84e-9fd5-4860-9d5f-f109740ad5d8", "indicator--965d23ea-27f1-4c18-bd33-0b14ae598255", "indicator--5495c00a-1467-4207-8780-f107200ca462", "indicator--57803d3d-0ed6-4868-b668-99b4afb1452f", "indicator--0e158f07-40a5-41ec-81ad-7503cad50ef3", "indicator--151aeaee-5710-4953-b9d5-5f1e5730aaae", "indicator--c20b9d52-95b0-4590-ba7a-f45d1d8b0797", "indicator--7ce69cd8-0f6d-4a22-bfd8-bb463e9d0e34", "indicator--f1894195-3fa6-4d6c-8bac-d79d2473d566", "indicator--89000bea-5dcd-4a42-b9b2-4d044c5a79b9", "indicator--71150306-07a2-41b6-bf34-67334dbb9cd9", "indicator--b48f4997-9610-4c9b-b0f1-dccb68486772", "indicator--d120f078-f52f-419b-b883-fa7a6b903ab0", "indicator--cc531558-6ab6-4a6d-acbc-ed809f473356", "indicator--5fb6b4b3-7813-44c2-88ab-3cc0fa5fbdc0", "indicator--10cb4073-9f68-411b-b006-f230d7a181d4", "indicator--9b69f9a1-72ac-4611-a9d2-7bfd98b45d94", "indicator--3dfad20b-752e-4322-bf74-152be7d815d3", "indicator--2c4cb691-261f-45fa-9424-b060bcdce841", "indicator--b18bd55f-eded-426e-9de1-1ce7c41a582c", "indicator--bc6941ab-4f91-4066-badc-c5169f5d6247", "indicator--248ece5e-c66e-45c9-bf7c-97777b22f3db", "indicator--95324cf9-3a9e-49a3-bd8c-9d141ed10d39", "indicator--dfadadec-cc5b-4021-a232-1c53b2f0fa76", "indicator--6b280fda-3ad1-4f25-8d6e-49bed0743385", "indicator--f0bdaed6-4598-4063-a0f7-5b6e107976c4", "indicator--bfe42d14-c126-401a-844c-7af395f172f4", "indicator--f5e0aa20-5e05-4547-8aa8-c9b3b6a08d1b", "indicator--5fa67a9b-68ee-44f5-a49e-d011bcce2e3d", "indicator--7c3bb9c8-9d4d-44d4-a16b-ed00378d5b09", "indicator--f0d63b6a-1bcb-4a01-9505-5fd78d2178a9", "indicator--8e367030-6d82-4689-a865-fb37b543a124", "indicator--b78669a1-b9c1-4080-b732-b7dbe83494ea", "indicator--55a68285-e25d-46cf-9c34-cbb22f1cc7f2", "indicator--53088d2e-a3c9-4a4c-ba56-75e07d8ca483", "indicator--506418c0-9911-4579-9efe-fd288d0ab7fa", "indicator--bda2f5e8-48d0-49a6-a06f-64457d8ad5fd", "indicator--110a680c-97aa-44bf-bd43-2d879347f2fb", "indicator--5ca16b50-273f-4e7d-9260-801e61407ff7", "indicator--1f733dc6-7475-4f76-bf5c-21f4eb4edc43", "indicator--8866789e-1cd6-4505-a5f3-6a2d82a3d64f", "indicator--b92c1d2b-2b04-4e17-b61c-87edab21b9f0", "indicator--036404ea-3133-4be8-8bd1-c0d2c82b6162", "indicator--a2a92467-730a-43c8-908c-8dc5e07efcc8", "indicator--594cf5f5-0c68-4561-b6c1-b031f0ee79ea", "indicator--8ca6a9d7-34c5-465e-b8b9-dfe9d4efe11c", "indicator--3e4f9198-20f0-4240-92d1-b6fa1e4a86e6", "indicator--1fa42f7c-dc1e-458d-bb34-4be34fd7a5c2", "indicator--a47761eb-2b20-4701-9262-1b8d0872c590", "indicator--b2ce7d81-88ad-43cb-8050-19719264990b", "indicator--2f90aa0f-90df-4477-952c-4a880c4a19d6", "indicator--33fb7dbb-0a1d-450d-801a-ed4f6e655bae", "indicator--6dfd33d8-e205-4c69-b5a9-5eec95f2b22d", "indicator--1336e297-2b2a-4bee-b9d8-e94041faeeae", "indicator--8cc1a02a-88e1-4f77-9f1e-9bff7612ab58", "indicator--44ac32e7-d27f-4324-881e-ffdb85ca6a29", "indicator--8b6e5791-10cc-4b61-ba7c-838769629b57", "indicator--f1b1e2cc-9f40-4e21-9db8-e077eb57a651", "indicator--4587261c-f835-4059-8e1a-1457bdb134ef", "indicator--01a9a6ea-44f6-439a-a2f0-aaeb57263721", "indicator--06d9577a-299b-4c1f-9b38-71ae1ecbfc1d", "indicator--cf827119-b807-41d6-8289-351230c9d678", "indicator--4f8156da-4237-404b-8fc9-97c835aa0d70", "indicator--e7bcc7ad-6255-4ff1-aa1e-b85f63467da2", "indicator--2e7e43b4-9e37-43f9-8235-a193d5d0872c", "indicator--ec70256b-647d-47d8-9ccb-683fb1bcec4c", "indicator--684b16e7-ce1a-4e3b-991b-ad719543d139", "indicator--c2f09c54-b98c-42e2-b7a5-4b9fb319022b", "indicator--18564407-0d17-43f2-b490-29609e5b1552", "indicator--f45d050e-6d1c-4173-987e-10cabe243495", "indicator--4ea8cc14-4122-4c97-8693-e76187ef56c1", "indicator--b9f01f77-1f31-400a-b005-64b65593bc27", "indicator--4868b1ac-d71e-4e93-ad31-20a3597efff2", "indicator--c1aef9eb-28fc-4591-9b20-e51d7c497540", "indicator--adddb110-9acd-4550-a16a-d984cb1d8235", "indicator--e1e5a4f4-54ea-4d46-aa42-4c046bf845b4", "indicator--82296710-4ba8-4a29-afde-0f5d9610a807", "indicator--69c884b4-2947-47cb-a61a-7167cb7a8271", "indicator--2b2d7fd5-de4a-481d-94cc-912caefc85e4", "indicator--6b325733-3c94-4a7c-9324-444d0bea84ed", "indicator--8ac86167-6222-4549-81b7-47fc7b61269f", "indicator--c4e86432-038d-4aeb-94b5-3573c9a85a5f", "indicator--8302b096-c616-438e-a8f1-379e495a88e9", "indicator--ee816e00-758d-400d-b0c0-2d07e19d1bea", "indicator--a6bb1713-df23-45d0-b123-761cd05bbf0d", "indicator--6ec84509-d0c9-4554-a2a1-25456f4479c3", "indicator--c4d2c95e-720f-4897-9827-36effff26919", "indicator--82182584-a50d-4915-bd65-0d06089b7a29", "indicator--62a786ff-fd58-4556-bade-9c0f5e603210", "indicator--989a35dd-7fba-4d57-ba1f-89f7adab5507", "indicator--29ed7ece-d956-498c-94a7-8162d05f3aa6", "indicator--2a6a4175-0c0a-427a-af7a-eb5992571f56", "indicator--ad186b09-714a-45cc-b87b-5e1b4fbb5f49", "indicator--09c59193-e9c1-4854-a31e-e9f3e1da32ff", "indicator--473d1adf-730c-4d9e-8593-51752fd35437", "indicator--04861db8-07cf-4ab8-b2bd-ae215c93f7d3", "indicator--f7a613dc-db9b-46c3-953a-c6b6ac1a43b0", "indicator--b62466b0-45aa-47b9-a45b-fa7e6b292e6d", "indicator--6069161c-d867-47cf-8da4-d0c5963f739a", "indicator--6f5df877-2461-4a84-a547-b69dbb4e0351", "indicator--3f41bbbc-076a-4a52-9683-686748450996", "indicator--4fdbd590-a201-4d37-852a-4e8caf247fa6", "indicator--10441ad9-f19c-46bb-b71e-d82538ea8fa0", "indicator--55fd9652-d448-4cd2-abc4-e1d0dcecbded", "indicator--72f2a5d0-de77-420d-9c18-89ca39382366", "indicator--6f08fd80-4f0a-41ac-a57b-9be5ac194c57", "indicator--8a305c5c-be2d-47dd-932c-bee602356abe", "indicator--985da7d9-b544-4fae-8140-2c7d05123037", "indicator--b4749e4b-f637-4a27-b307-cb48f7496ce9", "indicator--cd698e87-3176-4ae9-978b-da059167e581", "indicator--667b50c7-d0b5-4d95-aa12-4a8d91fc9285", "indicator--0e85207d-a16a-4fbc-8882-ee624dd4662e", "indicator--c0fe5fc0-a1fd-43ba-a712-59ae5b587675", "indicator--7d6d998c-4295-4abb-869a-36888698180c", "indicator--3efa946d-ca18-413c-af89-93733cc6d702", "indicator--38d2adff-a51f-40d0-a585-952a071a0ca5", "indicator--8e21ff21-fce4-4883-947c-d364717a0ba6", "indicator--5959c0ca-abff-43dd-9eb4-e3d8bca8ddac", "indicator--41189c39-b356-4f44-90b4-5e62e80c99e0", "indicator--77c3d7bb-145b-42e7-a526-089b33ded9ec", "indicator--c3903192-8f71-435f-a423-50c03a0152d3", "indicator--a9f915a2-4bd0-43a5-976a-b9b2597ed736", "indicator--3b495c8c-075b-4aba-b0cc-477e4983c2f0", "indicator--8a753c45-d83c-42c5-bc87-0243267708fa", "indicator--145bc422-b5c7-4992-8710-051c3c68e178", "indicator--c34612b1-5a90-4ae5-bb02-7756262183e2", "indicator--49928083-7479-4fbb-9ff6-c1cd60d89dba", "indicator--917ebc76-295d-4640-9bc9-ffd93aa42b6d", "indicator--cbe0617e-3b25-4573-a8ba-a48f8f15d4b2", "indicator--70e9376c-f770-4b7a-b698-871f07bde1fc", "indicator--01770f22-b36c-4df0-b5a9-a80db70553b9", "indicator--0f5ba930-6cc9-4f51-bb65-004e5a1bbf11", "indicator--8bbe3b1a-277b-45be-8fa5-641453b880e8", "indicator--8037effd-6998-45e5-8aba-41fa9acee997", "indicator--2fec0486-aac1-4620-a689-d86b12532bb2", "indicator--fde100f3-4537-4a6f-9eec-2965daccd11d", "indicator--6b477ab3-30b6-4e47-96c2-987a17ec3207", "indicator--f9486db9-f2bb-41a2-adbe-aeb3e7d62a7e", "indicator--d34b2402-00f8-48e8-a808-45b33c4ea00e", "indicator--c4c4ce5f-9585-4985-9b11-206f4622b4eb", "indicator--0dbde0be-4121-44c3-86ec-10345d534262", "indicator--ef072ef8-9f79-4e3e-afbe-6fe386dd2dae", "indicator--259f7f9c-42aa-42bf-a113-c8347cffdce5", "indicator--0edb844d-82d3-4b20-b2c2-bca514ff689b", "indicator--81621aa6-7d71-4e0a-9bfa-20795d202a51", "indicator--2b18e90c-4583-4ff7-a9c8-4581b09ab6f7", "indicator--9c8338b5-14eb-460e-8285-904f597e9974", "indicator--3ce50db4-211a-472d-8b77-d8be36974087", "indicator--8595296b-5e86-49d2-8714-9f1cf17d6e8d", "indicator--60d384fa-cd72-4875-b564-6a63b785555a", "indicator--b9494776-faf1-4564-842e-e93363b6db6d", "indicator--e8096050-1704-464e-8025-230d0a552117", "indicator--7264f6f8-569a-464a-aa70-5606f2e1f390", "indicator--ec3f2ff3-56cd-43aa-b33c-9b98f777b30b", "indicator--b159975f-4d6f-410c-8841-03eda5276d62", "indicator--b96ec0ac-a882-4ffe-b442-28f1da42f73c", "indicator--27f89087-0c20-42fa-adfc-7cfc8f226490", "indicator--e97ce6ae-2b1e-4cd4-9687-f1a9599d6742", "indicator--c2ca2891-b93e-462c-ad41-e01aad6c2296", "indicator--57d8a318-03bb-47d4-93e0-c5dde749c930", "indicator--dfe66e29-b0db-4158-b615-13ca1377f228", "indicator--0ea7abd2-1ad3-4e78-801a-f0843c7b5c99", "indicator--fc603a19-bc91-4e1c-bcee-30aee4415198", "indicator--9f16cc9c-0d49-42e5-b546-8b9bc1f1d184", "indicator--2165ab75-ceb1-4ff4-bbc1-7b914c7aef49", "indicator--3ae0b891-f151-41dd-af53-f4513cfd854b", "indicator--7ac7a931-1a13-4adf-840e-76cfca9ad67f", "indicator--28415c7e-a699-4260-8795-907801d18a25", "indicator--371d06ac-9056-403a-b331-e57a7a2c7eb2", "indicator--fe6bcf58-9b4e-4bf9-8665-49cd398af0bf", "indicator--8273b94d-d4bd-4e82-86de-a447b1ce8f58", "indicator--193bb3e7-929f-424f-8726-971646e36725", "indicator--113aeba9-2e10-420f-9c43-8ca4c11b7489", "indicator--8852ac94-e8ea-4344-be76-842463e56d8d", "indicator--edce9d1f-7565-4918-b023-7ca802b95a64", "indicator--d4b870b9-fb63-4183-ba18-07237a663d05", "indicator--2179c017-df6f-4647-8836-bc21d3d2014d", "indicator--0880cdf1-26dc-4ede-98aa-bb3630319508", "indicator--f88ad4b8-e4e6-431b-8064-bb2708b1be03", "indicator--b21dc109-5ee9-4e3b-9542-e07bfdd2c993", "indicator--f28799d2-e4f8-4b48-966a-1524cdc3c41f", "indicator--854db009-6784-4662-9f15-f763613747b5", "indicator--6ea36294-6930-4283-84af-e2f9b7c62710", "indicator--ef4f4608-0836-4f97-aecf-5e2b8c89b12e", "indicator--c6fb42b8-50a9-4269-851a-23d4ef5de46e", "indicator--aed0b4c4-1866-4283-a30c-fae0adaed2cb", "indicator--409b7d75-7271-4058-933d-b1c52633613b", "indicator--805131cb-25d0-43b3-a575-30cecd9b8ca2", "indicator--ae7d6fab-9689-4258-980f-c99f834dea56", "indicator--999a4130-a018-4f74-b6de-69db987bef64", "indicator--cf7abbb4-d1ca-4885-b0aa-74b3de7e5d11", "indicator--7186c58a-390b-4dca-bdec-b784f32b151e", "indicator--ff19c1c5-8178-459f-afa2-b6438781d954", "indicator--07bd16a5-088f-4460-be76-65375bcd3026", "indicator--01000f2e-7012-45eb-bb01-28cdcf2f7e1a", "indicator--82f0810f-8f92-497c-942c-5252d39f0dc8", "indicator--1eae1095-c2e2-43ed-9be7-35f84129712c", "indicator--bca3ccb2-30b0-4f3a-a7bd-a74ea6035529", "indicator--b8f661d8-c197-4954-be72-fea05ed8cbbd", "indicator--9af4be22-d0f4-4f86-b24d-95a956b1ae8e", "indicator--e7b81b79-db75-4b41-b0b7-a9846075a7fb", "indicator--3f9e63ca-afa0-4527-95b4-47b89b179107", "indicator--bb747079-b4b0-4448-bc2c-53b0e152bfc0", "indicator--b886b16e-aa9e-4a4c-82c3-e1e085b6029b", "indicator--f76c17f7-ca3a-4ccf-b680-be6a70bbaec0", "indicator--3567ba0a-a296-4a0b-9b23-4eaf79305d5e", "indicator--c0c77b2a-9ae0-41f5-a9a3-c65a27e3f970", "indicator--3e35e856-84d8-44a6-a694-a93cb37b8522", "indicator--f0dc4185-6c2a-4b6b-99d0-c8c4657ee8fa", "indicator--f3b5dcaf-1f59-492c-ab93-708616388934", "indicator--49335146-490e-4428-95cc-9fbd3bfa4679", "indicator--c9131282-3a40-4328-8f0e-e79fef464025", "indicator--644a1dab-bb35-44ba-ba27-063578507143", "indicator--566a9d85-c40f-433b-b2d7-fab720a838a8", "indicator--efa75c7e-8285-4025-9e94-0641820f0d29", "indicator--4bd7f4fc-9482-4498-8936-63154ecb9a03", "indicator--577c0353-86da-4d48-9e2c-281fb4157a2f", "indicator--bf376a96-139e-4c2d-be80-210034cc9733", "indicator--8032b3d4-e93e-487d-8593-d05e06f48610", "indicator--49525ed1-3d34-4382-bba2-ff23af119918", "indicator--64827ebe-ec44-4de7-a4ea-edf848541cb7", "indicator--c1460114-4b19-4ef4-8d50-6c13a844ca0e", "indicator--0504b099-c32d-46cf-bf11-ed3974a6e5ba", "indicator--ae3fb60b-9abc-4685-841d-d18a62ad10ad", "indicator--c1da780a-a6ee-4138-8a0c-816a15897691", "indicator--97fffd66-3942-44ea-a74a-5bd4840c5021", "indicator--e4149353-2b34-4cbe-b4f3-7aa702d7dcd4", "indicator--def09cb2-31d0-4f67-8e43-d74e1a3a2345", "indicator--2ffdf078-52df-420e-ad6a-cd405c57c115", "indicator--ce878dad-e4b1-4c3f-a63e-2acf7d4d05dc", "indicator--8544ff24-2a97-4915-a236-37681fcf2723", "indicator--b88bc9f2-f2ff-4823-9660-539dfd45395a", "indicator--b8adbb37-680b-47c6-b9e3-b5c8e418bb45", "indicator--db0ba368-5f65-4fed-8db2-016285b2b729", "indicator--8911dad1-0ab7-4228-927a-76c74aed00ae", "indicator--9ea1125e-b9ba-496d-88c8-83b7547634e1", "indicator--124160fd-ad3f-4493-95f1-a2a54c937d46", "indicator--a020e4bc-10b8-4a25-bd3d-9e5eb00b388f", "indicator--c9f0ea8c-4def-429d-a418-103401c51de4", "indicator--a21f5519-a0ca-431b-ae57-99c5f8661044", "indicator--08f4e063-21c1-4729-b827-71f5c2ceb62b", "indicator--221fd4e0-5651-45e7-8b12-113568394875", "indicator--f6a89e73-cb24-4e5d-ad30-54872e96816d", "indicator--8a1026ce-b04c-478b-9c16-3172a77aa7ba", "indicator--0b3aa77e-0b58-4ec6-8f1b-8cb646cd90ff", "indicator--031a04d9-bb92-428c-95c1-244a820bdfde", "indicator--469efe62-4e18-460d-96b6-7726b75b3839", "indicator--efac0b35-a367-46eb-99c4-cef00d6b8e52", "indicator--f41952b5-f554-4e17-a9ae-5cfa262e3f18", "indicator--10ed6864-1bc2-4dcd-b4e1-9ec9fe6e7518", "indicator--23293689-1b38-49df-9894-fe2b82ebe6f0", "indicator--515e0bdb-7812-45b5-b809-063e993fa987", "indicator--490c25e9-a4fa-4529-ab26-0da1912fd22e", "indicator--f6a5975d-e2e8-4ca9-a38a-df79c6f262a9", "relationship--f5314297-5d69-4f9b-b4c2-94fa75308476", "relationship--f0a185ff-13b1-4741-b883-eb4f3a4add50", "indicator--1a7bc031-e380-48db-8168-3d40d457caf0", "indicator--fd675e36-acfa-4874-aa97-b354ae1c01c4", "indicator--6de1a668-0846-4e36-bb94-15380ed3d6f8", "indicator--a11e35b2-2548-40fd-88e6-222917a8610f", "indicator--66dbfb6e-7248-4217-ba65-9a71bfc2c202", "indicator--fb76cd88-c185-4124-8ef3-3aa1d9aecd81", "indicator--523af7a4-107c-4616-8837-d78c0ad66da7", "indicator--028d08af-0411-4ccf-88a1-939a25aec475", "indicator--cd28aaad-7cb8-437f-aa1a-6550c56e0629", "indicator--b7f9bec0-9849-4ae2-9cda-c91f4472b9dd", "indicator--54736ea7-d21c-4fc3-91e1-b4a2fcc291ff", "indicator--1d8479ed-7843-4975-8ee0-7867364bbaf7", "indicator--fdb74047-a8f9-43fe-ac5e-e79c7519fdc9", "indicator--e08f7f3d-2eff-42c5-b1a0-5801034136fc", "indicator--375e059b-744d-43ef-b3d3-753232c73602", "indicator--e50dd7ba-2ef4-4045-b66f-def6f1a231d3", "indicator--d1c79229-fcbd-45dc-ba07-1b559fa6722f", "indicator--e35b25bf-2d41-40d1-8fb2-e64669cad6f4", "indicator--5b13131a-10c1-4536-8d10-c8e36eae2f30", "indicator--816e673b-6f1f-4c6c-97bc-a1d53252fd11", "indicator--be7d42fc-0076-40c4-bdee-7c7970ba4fd1", "indicator--ae9790bb-310f-4476-abcd-28bfe7bc3aec", "indicator--c4ee744b-54af-4e5b-b9f3-874fa113c21a", "indicator--dd83bc5b-8b26-4a1f-9854-89e47101c08e", "indicator--26227904-a981-412b-8e61-1aef411fa210", "indicator--b27e55e3-b4f9-4117-84d4-ffa112f1d774", "indicator--27f15904-53fb-4dbb-ad45-c352e1e56b7e", "indicator--69339a48-3abc-4d9a-8291-8cd2ad644a57", "indicator--baa99de8-0376-4d31-8e71-2a96673677db", "indicator--fb1846b2-7731-49e7-987b-f801882a16d3", "indicator--ee5ab446-0c78-45f2-8e56-3d3d9c64074e", "indicator--036af249-68f6-4094-9e04-143e0cd71af0", "indicator--4de4dc88-9b8c-4e8e-a795-09287106413f", "indicator--1cf5f592-772b-4e4f-8282-fa47351ad008", "indicator--11e1ac4b-97c9-4672-af27-3f777b035762", "indicator--23fb315d-297f-4615-8034-be7d7be877c7", "indicator--fb03a738-960c-4fd6-bcd7-c1052fce54ab", "indicator--4bb8166e-7436-44f4-9a00-191b8e1f45c4", "indicator--9bdd00fd-2ea0-44a7-92fc-fa874b869f7b", "indicator--7247339c-1fe3-4ad1-a19c-ac2bd2cda2d0", "indicator--e8875d7d-aa36-4bb3-aed3-e14029d77007", "indicator--f351e469-ec01-4e7b-86b7-21564550596f", "indicator--b31eab84-fd92-40b9-9911-fcdf0814a937", "indicator--ff03092a-17f6-4025-9157-83908ff7eca5", "indicator--934c9b35-f1f9-4fdc-ae2f-e7e87af6dd9e", "indicator--8f3cc41c-57e2-45bc-8ecd-98bbc300ffcd", "indicator--2e155f82-75c5-4167-858c-e006d180df54", "indicator--03b1e978-6676-445c-a08f-1ec64d3b1841", "indicator--92baf02f-94d9-4750-b1c5-f402fb88ed2c", "indicator--2c4ebb60-c9b4-474f-b88c-986dcce2204f", "indicator--31a97576-9ce2-4959-b811-521f6f14662c", "indicator--18010869-fe92-435a-9654-9b5604028a24", "indicator--03dcb057-dda5-4f10-8f29-221e329d23e9", "indicator--25b4b923-3c73-42fc-8798-27fb5a468abe", "indicator--98de4d9a-5c6b-43e8-9183-d932091dec35", "indicator--4ce269af-8b10-4f40-af67-79c38a52521a", "indicator--414fc92a-1bb8-4ca9-bbbd-1cd9ad95bd4b", "indicator--2b686cc0-f2da-4801-93e6-ee73c7ea13e5", "indicator--2f567afe-b5c5-41de-b8ea-907008b09e09", "indicator--4bc7f466-635e-47de-841c-b7ebdc158da8", "indicator--2fccacff-9099-4b47-ac41-50dc27d83c5f", "indicator--f656271e-eb42-4a0b-af03-2c9849a85993", "indicator--e70585e1-0167-48c2-93db-6e95859bcc1f", "indicator--28dcbcc9-f534-4e1d-a720-754bde9e0fa8", "indicator--a4aba5b3-36be-4927-91aa-2c1b19e97422", "indicator--6a46933e-f78d-417c-bba5-d1c6c65498fe", "indicator--457ef912-3b4c-4066-b617-3f70688e1baa", "indicator--97b26104-96e2-49a2-885f-2c0c0590f060", "indicator--1d0a7b99-b971-493e-ad99-f8b0e99403c1", "indicator--08f11d9a-ed60-46f6-a10c-2b1064c44a02", "indicator--3bdcbee7-329a-4176-81a7-8c56d3056347", "indicator--19b7b391-d69a-46b3-8fd6-777a210db1a3", "indicator--5ab84dda-c9f9-4d96-913b-9f9e8bfc66d9", "indicator--6c825e2f-b26b-4f35-82c6-42009ea77552", "indicator--a8aadab8-ba50-4ca4-8853-45d61ab3e1cb", "indicator--fa8bbedb-7ce8-4572-8311-34cdbf340876", "indicator--6f2e8001-bfd4-4a2b-a020-fcf644adf10e", "indicator--2c2a61c3-8d7c-46ea-9e8d-eab2212d33fd", "indicator--fbbc5e9d-a722-4a89-bfbb-716e2fcd1b1a", "indicator--f7e548c1-f856-4eb1-bcb9-486aa771b753", "indicator--84e8a3a2-92f7-4f51-8e72-1cadabd3d1b9", "indicator--69555d15-7b35-4807-8d7e-b167b08d1fc2", "indicator--0d20d36c-a652-466e-826f-ea821844f256", "indicator--0491301b-247f-4c11-a587-9fca0bfbd7e7", "indicator--e60904b0-f1e8-43af-8610-3a94a1142c75", "indicator--4368130b-e204-4161-9d9b-5a618c5e1121", "indicator--a6f883bd-fcfe-4798-8580-6acff5e9a217", "indicator--ff425265-78a8-4220-9bf8-12accbf6c3c6", "indicator--9c27f7d1-c844-4a4c-91dd-9fd2baa4d5d8", "indicator--1b7261b2-bd03-41dc-b16c-874f0d777c55", "indicator--1c5a4e05-3360-4472-aa4b-6fdeac212e0b", "indicator--5d1bb8cd-d09e-4468-b95a-1c0cc1dbc23b", "indicator--c4040427-fe29-45f2-83b3-e1c2a03c043a", "indicator--2946278a-1e51-4e5c-9741-292b4016ff3d", "indicator--9f0448a5-ee6c-44aa-9fee-c898d8148705", "indicator--c2991c52-447e-41a5-b9d2-102e475081cb", "indicator--4bf14ab6-a1a1-4ae5-b28a-b044683938c4", "indicator--b4f96511-60ae-4207-8471-f2965c6b84e1", "indicator--c6bc699a-3001-4335-9179-305683e8738b", "indicator--223fa5f2-0972-4fd8-8f80-95ceb409dfed", "indicator--de74297c-778f-415e-9842-74530f15fff8", "indicator--3e4d5b1f-4655-43ef-a879-1c84b212d837", "indicator--c6744432-5b49-4608-b240-e1773419e0e2", "indicator--068cf640-ec0d-478c-bcce-6501e9479e14", "indicator--aaa71ef7-f5f2-4ad8-b304-88e5d6a64ac0", "indicator--b10fedd3-83f5-4ce3-b91e-70d704e213f3", "indicator--2b89eca8-ff81-4d3a-8a5c-14f6de64cc48", "indicator--cc6d04b4-b192-48b0-92ae-03cf3be2e4e6", "indicator--01e8880d-9165-47f1-ba55-97886d7e1f62", "indicator--e5709a30-f7f0-482b-8c9d-b22959e9a8c1", "indicator--675e1b49-497d-4c67-9598-f7b798b0c9e9", "indicator--ba9bdc4a-54ea-4d5b-9e2c-8c15c7fb55d7", "indicator--6b9bd67a-4cd3-429d-a37b-2c704b59207d", "indicator--e4e0800f-a2a0-4a1e-9215-4a29814eda11", "indicator--dbf1b39a-8501-4ac2-9c43-aad5220b837d", "indicator--a2797351-3c03-4909-9a82-4a918cec0f67", "indicator--28511c8a-20d8-45c6-8bc2-d6c9bf66d9d6", "indicator--f21077ba-f593-441e-bcad-16df4d4e4154", "indicator--547cba6c-90e2-4635-8578-e2a0fed26531", "indicator--6ac616ef-f144-4308-98a5-d8f85abbac06", "indicator--eaf9ee65-e650-4deb-bc3b-9ec270aad858", "indicator--aeeaf0c5-2dca-471f-867b-8e36f34983cb", "indicator--d456253d-03e5-48d4-8024-d7f5affb9711", "indicator--ad458838-3671-4804-a8c0-778081c3fd90", "indicator--2b96c8a6-4c53-463d-8290-a96ebd0ec7a6", "indicator--cb047f9b-ad4f-4a51-b0dd-ea7fb6b0e766", "indicator--9075d022-c114-477a-bd7c-a8f8b987f5d6", "indicator--e72d5b29-dfda-47e9-8198-c3b65637831d", "indicator--43e81c53-c57d-48b3-8b24-a77afd79f5c9", "indicator--7f1d1c29-cefa-41b6-9ddc-133c12fec192", "indicator--a16bd585-c1e5-45a4-b115-aef5b5ffba18", "indicator--9ff0f7c0-3311-4a5c-ae7d-ae47582422f2", "indicator--d09b5caf-496c-445b-b9a2-cec14ab91d43", "indicator--9320ecf1-d54b-4a23-94c8-e6e55728f6f1", "indicator--413b4aa3-ab08-449d-8c0e-03b5daed961a", "indicator--d47af845-7a5e-412e-aa4f-b2a60a4cfc82", "indicator--16c84ab6-66a8-4e8f-85d8-902f3a430a58", "indicator--6a74c546-8e14-4dd4-828a-6100dcbc0465", "indicator--ee40ebf2-3599-4918-aa03-818715905467", "indicator--a41e1219-6e2f-40fa-ac33-ca4e805b6696", "indicator--e032e782-39de-49ba-8457-0373e61effc8", "indicator--84fe0d60-88ba-42df-a0a2-b662a4ed583c", "indicator--270d482d-741f-4c6f-8a18-489bd9275e6b", "indicator--9649b8ba-3ace-41cf-bffc-d6c81b7419ff", "indicator--d09801b6-4f48-4b71-b8d3-bb684f0f9a3b", "indicator--7d520185-2f33-49d1-9192-983e078ab250", "indicator--a685cef8-20b7-45eb-912c-46cef573c413", "indicator--5e6d2b50-168f-4c43-a4a8-a5e0cb4616bb", "indicator--77fb06b9-b866-4c4e-adbe-c026c47ca98f", "indicator--857db731-096d-48c1-8b19-74fce98bfcc5", "indicator--8ac5ab3c-219b-401d-87cd-42e84e5b5e57", "indicator--f53efa79-04ce-4a8c-89f0-de983635d726", "indicator--a050ddac-17f4-4ad0-99cb-9a134b6d1d2c", "indicator--15e8e5a8-5e2d-46f8-ae2b-a5c4f391f7e4", "indicator--a97b2c94-db3c-4078-8ff9-3eb7f53b76b5", "indicator--6b8f6f29-bea9-47fd-adfe-5d4c86e2ea80", "indicator--14badb18-761c-45d9-95b3-9485c56b9377", "indicator--eea8b139-25e1-46fe-a88b-782ca2e32a4e", "indicator--bb39c369-e707-487e-982d-4f098d9c2a05", "indicator--c84d239a-b359-4dde-8cc4-71db15fb259d", "indicator--93ca82e5-e4e6-4090-b248-d8f13ffd2046", "indicator--769e6f92-95c4-440e-beef-abf19a748a26", "indicator--caa6ad64-ab91-4699-8d12-52c6c29f8f55", "indicator--cba2af18-df78-4b79-a48b-a99a775bfab5", "indicator--f4026dd8-d2c3-4a8c-8267-10ae617612f5", "indicator--ca793ecb-23ad-432e-883e-ef00666dd3ce", "indicator--99f6313f-9a69-4e84-b02f-51132bcb0af5", "indicator--30782c63-e214-445c-93f0-efa7bc98bede", "indicator--dc3b3e2a-ab0e-4b87-b21a-a4722c752010", "indicator--101fa4b1-fd07-4602-986f-8e92251644ce", "indicator--14ded9ed-9f10-40ae-812e-cac934e1a0be", "indicator--2e3f0968-b027-4bdc-8b22-ecc9c01578d7", "indicator--6a80942f-9dae-4ade-80ba-45d9902e7955", "indicator--89a8f8b7-4769-4b10-a6b4-704449dbf6f9", "indicator--1d15e8b0-3b26-4441-8666-69d8c1db3888", "indicator--5687f12f-a39a-4418-af8a-aaf059a45a9b", "indicator--75cdab42-5838-4b9c-8d33-1a1ad92dcc9f", "indicator--66d0417b-d349-4394-986f-28f240d60772", "indicator--d304c261-bf72-4045-a70d-ce80508cc035", "indicator--9337fc4b-a0a4-49eb-aa85-2bcc39d48fdf", "indicator--0444fbc6-1908-4410-9e99-088d2626cfb0", "indicator--a5882714-72e4-4013-81fa-c531f5d9baa5", "indicator--d86c067d-03ec-4b14-9347-bd2e42a7e771", "indicator--9ca8331c-868d-4fd9-8b14-64918718d3b7", "indicator--86adcc06-6c4a-4f97-becb-6bf30eb9c213", "indicator--7e7b8969-2caf-489f-a47b-2a5e3cae3493", "indicator--5d8ea124-35f9-4047-a36f-517ea4843d5e", "indicator--809ca871-e84e-4c19-8817-a50a4ad9427d", "indicator--bcf4c9f4-4536-4509-a0ed-530885c37d17", "indicator--876e11b0-43d9-45ea-8ac8-47b9b2eafa0c", "indicator--19197511-d37e-4c6d-87f0-85a43e15fd28", "indicator--55c77fdd-4df0-425c-8b9c-c767241ca488", "indicator--892e28b8-46cc-412f-a04f-0e625770b6d7", "indicator--52f76d1e-c9d3-4233-a231-54ea94d107ff", "indicator--c8f22b9a-f3b6-42ae-b99a-911852728269", "indicator--65351d7d-54ad-4bd9-b17a-b2b2a1e92f6f", "indicator--8fba699a-ef41-4a69-aa2e-11913479348c", "indicator--6ec00eda-1392-4b61-94c7-21546f14c598", "indicator--239d0c46-dee5-4c79-a5f6-8b6faccf753f", "indicator--aa028733-b1bb-4b94-a0a1-c06f734312fe", "indicator--f3b5df93-aced-4ee3-bb49-7926d0b796e5", "indicator--cd0e2d31-d4cd-4128-af6d-77253027cec1", "indicator--193b7848-9eae-4557-8e53-ab6ea227fcdd", "indicator--177e3d45-0ee7-4291-bd4e-98f701ae962b", "indicator--37a652ed-2c2a-4725-9249-1e74a3b7e5fc", "indicator--b203e02b-840d-4344-b134-bbc5edf127e2", "indicator--3b4d6ed0-6510-409d-b866-4b3106034e7d", "indicator--501e0ba6-7929-4663-9bb1-734d165aee8f", "indicator--efb83e07-3cec-48bf-91bb-89cd7433e81b", "indicator--935cd10c-c9c8-4f97-9f82-672730fe1e5c", "indicator--57c2d0d0-868c-4d7b-8725-777efc3416b0", "indicator--943fddc3-952c-424c-a6b4-55eace934cd1", "indicator--51507f36-7c81-4f85-a93e-9962440fcf41", "indicator--d434b0ed-5e96-4d34-b0e2-fb465cc64544", "indicator--942acf04-2764-4d56-8fef-b3aa957aea49", "indicator--3305bead-915f-4dc0-bc69-274c5924840e", "indicator--7eaf245e-9f98-4685-8447-2b857234562b", "indicator--6c3ea577-4dbf-4ab3-a7bb-282ebfad7a3f", "indicator--7f4b44ab-24b9-481a-8515-94608bd61204", "indicator--b583ead0-e139-460e-b2b3-3a2321d5e2e9", "indicator--7670ed23-f102-4ece-81ba-886815032cde", "indicator--e458b3db-bd1f-40a0-9328-33e7f88f1b26", "indicator--ec544faf-ebde-42cb-b61f-023607193789", "indicator--5b726401-54b1-4c97-ad36-c9d22f167be4", "indicator--222e8a10-35fe-453b-a21a-99ce93cb646f", "indicator--03fe56c3-c251-43a9-92d6-a0fb36d489a1", "indicator--c45df864-27bf-42e5-9d89-9f282a5852c5", "indicator--a291fe99-56bf-413b-983d-8a3efb18bdc2", "indicator--dc4f87f8-6569-4b24-9e44-dbbef23833aa", "indicator--bba3f827-e4f5-44c4-8603-ab88310c3919", "indicator--af835ba4-8cb1-4c8b-8d43-ed835dc93837", "indicator--750138a9-9e99-4bbc-a79b-a5f12bf90170", "indicator--2d86edf7-e566-4bba-86be-99dc8bf47d3e", "indicator--9975d828-85cd-46ef-8e32-a55fb3047f1b", "indicator--66e96bf1-f5fb-4869-8dc8-1a72352fefb5", "indicator--7dfc2623-b359-4af9-9ccb-a0811485086d", "indicator--e66de5ad-20ac-4f82-95c1-0aabf64b199e", "indicator--9fb1eb4a-3202-4529-9753-8868e9be2e1d", "indicator--14cc7dae-fa9b-4b78-ad5d-94972c761a20", "indicator--40d03f43-7f84-40cd-844b-1579d1db4635", "indicator--0b3ae63a-a746-44cb-b0df-d2e7590762d0", "indicator--a2baa657-ad4b-4da8-a6c2-7a0e908d7294", "indicator--baec246a-6dd7-4511-8165-aff4f72a64c7", "indicator--479fe27a-a09c-4caf-82e3-22ad84a66250", "indicator--63320503-cfd1-4d9e-b017-136e3c818e5a", "indicator--41085ebc-5020-4deb-9be2-0f4ff88843e6", "indicator--776874de-a671-41c4-aed9-0c4a15720539", "indicator--ca8c5d1a-5a14-494e-a4fd-5484c6b42fb3", "indicator--2a3cb951-a7d1-4851-888a-cf55ed1559f0", "indicator--eb23e3a7-a558-4a30-bb28-315541429d91", "indicator--74c874d4-9a41-4d5e-8782-e3482a621b56", "indicator--afe3e0ef-3c9a-44b3-ba59-a74fb30b429c", "indicator--a453ca9d-4068-4f8f-94d6-6b45a9b5312c", "indicator--ff8951a4-da9a-4767-968b-356952ff0282", "indicator--8786905f-1b44-443f-b8bb-0e4f793273ef", "indicator--a7051d5c-a31c-4502-aff0-6e7b01b17d45", "indicator--abe663e6-8a5c-4efd-9708-65bc6ed5c584", "indicator--13e03382-c500-49b9-8225-04706b287a0b", "indicator--376a1ceb-c6a7-4ca2-8f0f-07ee483f36b8", "indicator--4c9adc14-4c6a-4c8e-bf04-7b4e3179d2a4", "indicator--97c01021-c203-4b12-825a-58ddad64d6b4", "indicator--639c9855-7e89-4925-b8b6-a37e247affc7", "indicator--1ac8c353-8e8a-48c3-8b05-98382889bd6d", "indicator--b3e37e8b-74b5-4b38-9250-035d05f15e8c", "indicator--f434213c-258d-4de0-9b9b-6143a38ca9ef", "indicator--52a6e416-57af-441b-80e9-2333f0a3030a", "indicator--27a14274-1a18-414e-aa5b-1eaf0ebf2409", "indicator--8fcc6359-d206-4b84-9d33-416da18a0a7b", "indicator--abf722b9-0dbc-47f2-a65e-df5c29f915d6", "indicator--83c6b85f-efed-4cce-a30f-9c9b3d1e9133", "indicator--2a49024e-0b33-4141-8e04-d04ee3921bbd", "indicator--116066f5-a6e4-4eb0-b8d5-f6c221b95b98", "indicator--171b1418-9183-4827-b673-bdcb8015805c", "indicator--eed05f14-3e79-411b-9a59-3ae13b3fe14b", "indicator--5e4da5d4-11e8-4615-8c24-dd0471f93e9d", "indicator--681a6078-d2d9-47b0-911c-dee7759fe634", "indicator--3c323497-649e-4670-bc7f-30cf8109cc90", "indicator--ff83b352-a225-48fb-b97c-53d57e94547d", "indicator--0118cccc-f321-4bac-afe5-306478475ac5", "indicator--44e1e209-dcba-4e0a-91d0-be193ab5f953", "indicator--56002adb-368c-4f66-b2a3-7848e83894e6", "indicator--dafbeab2-3c5f-41ff-a03c-33266ae3ca07", "indicator--deb2a9cf-8330-4115-bffc-593c719b0843", "indicator--f7af83d7-3134-4d0e-bb3f-dd3d0f907c74", "indicator--b5c62efe-8a77-4baf-b0a9-8ff4b226c153", "indicator--498c1719-5f2e-4ffc-b07a-a27561ee0535", "indicator--465b9335-b7b8-4261-b45d-e0dbaf34743f", "indicator--3a7710d5-43e9-409f-bd59-586f9b43a015", "indicator--71d23802-5237-4904-a08d-1d2db8a852d3", "indicator--0a9e8a46-dafc-466b-a1cc-fdceb44b6f81", "indicator--b949b925-c376-4906-8b51-cafa9aa8dd83", "indicator--99dabafe-5be1-480e-a419-9d817ee2a352", "indicator--be46c5be-de18-4ba0-b228-526c26e6855a", "indicator--ddd04234-b31b-49ba-a8c1-ddd5c529e633", "indicator--dcd43b35-1dad-46ce-ba98-109fa16e40a4", "indicator--b032ec88-6fa6-46cc-a2ab-72a69ef839b9", "indicator--5e20dafc-7877-497c-bc92-7c3e835c45f4", "indicator--c93d6305-56ba-4946-8769-b079ded73e29", "indicator--d744e717-64c8-4aa5-a04a-4a283e5e9652", "indicator--02a3c437-9f43-4fc4-8ab0-d126fadf4ee3", "indicator--4d77d4e4-f654-44ff-bc79-4178f8f37c35", "indicator--a0ca8c7b-3078-41b8-95a7-34e5fdaf990e", "indicator--2d37bed3-fbb3-4c1e-bb7c-61b556f9b983", "indicator--9589c4e6-1811-4793-8453-9880df784f20", "indicator--0d905148-3b2b-4fb7-a06e-d3a1ba518867", "indicator--037f0650-6f42-48ea-96b8-639f98a0ba65", "indicator--5b94b553-42d4-4d0c-93b8-bf09c0320394", "indicator--ee677bde-456d-4ebc-8a79-e6c44eeff259", "indicator--db7afafd-9a17-4cea-99a3-bb0f867ed916", "indicator--888d9020-de01-4099-a482-ca5296fdb92b", "indicator--2d6c9163-a0b9-4dd8-b305-0f783b7a1a6b", "indicator--895f683c-6006-4a11-b6ce-01e5ec45510c", "indicator--cf6fb3ae-4686-4739-b9aa-cbc69ac4f5f7", "indicator--6ec2a30d-2dd7-41c6-890f-3b1010db1d54", "indicator--f71b2502-6e2f-4dc3-a3f9-40aebf3981e3", "indicator--0c3dfad3-89e8-4827-843d-7df09b003e81", "indicator--39b86df2-915d-433b-98df-ea43b939ffd5", "indicator--69a9c2fb-a126-4cf2-842b-ce49cfd57d09", "indicator--268c17b5-b89a-4659-85ad-f3103d4f0190", "indicator--de6a7e21-1c67-43d6-984e-6ce9a5eccfb8", "indicator--88e51d9b-697e-4672-8ef1-71b80409271a", "indicator--e8d8bf2f-48af-40f2-81d0-015e0f517cc1", "indicator--b5b3d473-1cdc-47ca-804f-43a810c5b46b", "indicator--f1e8b0d4-4652-4439-a7e4-c0d27dc266c5", "indicator--9479bdc8-a4cd-48ff-9db3-48778543f074", "indicator--968769fa-a77f-431a-8b33-a4e9f6301466", "indicator--57973a36-f174-4ad2-96c7-1f9c8b95ea78", "indicator--3436911d-d445-428c-ae23-45f283c5632a", "indicator--cff44f91-5469-4c4e-bc3e-b27d1502165b", "indicator--d169c45e-79c8-4e4d-82ce-07ad75243488", "indicator--a25113e1-2e88-4ee6-b30b-0127f80fd56a", "indicator--d05eee36-b8de-4bed-975c-c59a7c2ce749", "indicator--f79d24db-8838-48a4-9b7a-ede7a3deb7bd", "indicator--bcb16204-7fe7-4d68-93f8-473dcc27868c", "indicator--fe668d62-fa6e-451e-b113-65990854c1d6", "indicator--c3127ca8-9833-4e11-8282-9dc9f4c96747", "indicator--be9ca15d-8eed-4d45-b255-237d7f136967", "indicator--f052683c-8c43-4df2-9eae-75ebb381af9b", "indicator--92001529-3aca-4289-8fb0-cc4167dd498f", "indicator--641a642f-2178-4568-a884-fddd22ad1e77", "indicator--780d0b7c-d989-43a9-8576-f583b6433626", "indicator--af422175-266b-4c99-94e3-8a8f6d411918", "indicator--4d1e1d92-4e9c-49e5-b741-cd817699feb5", "indicator--a7474a93-ab97-4f2d-98fe-d8fbf36b8403", "indicator--333a5c4a-0e43-4820-9d47-4df188c4850b", "indicator--23cad2d1-70b8-4cac-99a7-bfbd03f50917", "indicator--c880cec3-280d-4f02-85f0-d82077ce6b98", "indicator--219528d4-39b1-4edb-b8a2-d5c0fac6d2bd", "indicator--ed6212f1-312f-45c2-8730-04d59645e60b", "indicator--f7b40276-aa0c-4c54-83e3-09468a0c0586", "indicator--c58578b2-ba75-45f0-9105-a972074932bd", "indicator--313f1027-0674-4f3b-baf7-11341b59e763", "indicator--e594f6ca-32e9-4711-b730-643347eff5b6", "indicator--201a2243-4019-43b1-b46d-76a805047caa", "indicator--c6e1bf78-3528-4a59-87db-1b0a91f72893", "indicator--ae217c4f-6952-4842-b1cd-4db94f4e1e98", "indicator--ae6a6353-d9f2-4279-af4a-5acf496e668a", "indicator--8099a84a-e5b4-47fc-8b0d-2f91062ef60d", "indicator--5e1dc84b-22cc-423c-b429-bf5ffb4304a3", "indicator--caf7e4e7-a3f8-4c3d-b535-463e5b425945", "indicator--fc8bf966-1c21-4530-b63b-386850869b04", "indicator--0673f983-ed36-486b-9d74-3aad8bdea805", "indicator--fd8677af-fab1-4f56-8204-b9370deb9c98", "indicator--e44fad2e-43ed-46dd-90cf-0ac957a22f10", "indicator--35f42eae-9934-413c-930b-ac5a178889cd", "indicator--628987fc-5427-4577-8d7c-df21349d969d", "indicator--834b9fef-fb41-4f97-862e-bb528d436374", "indicator--796d6a9f-5a88-41a3-acfb-40c2578353bd", "indicator--42353b75-95c1-4032-b0a7-d5cb40731e8d", "indicator--bf0a60d3-9ae3-43d3-adc0-262d3e1247ea", "indicator--7caf8570-73c8-439c-9054-e8e599a7c716", "indicator--19ceae32-45b5-4e29-baba-5e6f1526f291", "indicator--fb70a31d-57b6-45a6-bf88-fea2732a1f45", "indicator--65a921fa-91e0-49a6-8f4e-fa5fd2648f98", "indicator--ceefc9ed-46e3-472d-b0eb-9e5df8205ca9", "indicator--59b05940-690f-4fbd-a906-2fc58dcf6dd8", "indicator--8dcced27-357a-453a-8eed-678c860aa04d", "indicator--eb193a93-46f9-43bc-9e7c-06c87bb09650", "indicator--1fe0b757-c1e0-462b-8947-05ef3203d104", "indicator--aded9115-e135-40d7-a42f-05900d70c4cc", "indicator--eb42d666-0794-4662-b599-ebab60382ffc", "indicator--375be313-d2f9-4c71-b750-32ef3880a4a2", "indicator--2074823f-9f14-4829-ac5c-db01b1ee1d39", "indicator--554cd04b-6190-4dc7-b962-8d2375014470", "indicator--5c0f0441-2dca-4833-a86d-578dc657bbdf", "indicator--b88060df-496f-479a-a975-d50cc680333d", "indicator--7631f9d7-4c51-4389-9389-174ab54c57a1", "indicator--c1fae81d-d227-46c1-aadc-41ece3414619", "indicator--0daf52ed-32eb-495d-85ba-f04301f97c6b", "indicator--99848550-a1f6-44ad-a072-f6757787fc4a", "indicator--7ba33900-039b-4a39-9643-ddacd17a7ccf", "indicator--0e89703f-72c1-42d3-97f8-fe368b7374df", "indicator--5aba2037-0926-458a-9ad4-7d2a3ebebf57", "indicator--6cdd6be1-f203-47fd-9612-9420ecabcfb9", "indicator--9b959d65-091b-4a9d-90c8-15ebc5dac15b", "indicator--cb35f70f-7393-49fb-924a-60b91d445d5d", "indicator--39689222-59cd-48ee-a254-d2c46420a78c", "indicator--a2561f2c-ea0e-4368-bbf6-506c60913cee", "indicator--2174e2a0-1fa6-4297-8244-06a0e8a1ed39", "indicator--9c998fa9-9d27-4e72-8327-9cbbaefbffe1", "indicator--ae305c96-b050-45eb-93c7-75660841a37d", "indicator--bea939bc-da82-4648-9170-16b349ef6ae0", "indicator--c96dc5f4-2eec-4b55-9999-f6688e1aa467", "indicator--fc01b638-5bb9-455e-a320-2438bab81a5e", "indicator--da826cf4-cc14-4331-867b-44c625c142a4", "indicator--7c483373-3399-4f9c-8e9d-fa7a7af162a1", "indicator--1c48b7c8-fdb5-403e-ac4c-15b9ce6235a2", "indicator--8f8da5d8-0c60-46fd-aebd-5d940181f54e", "indicator--11dfda32-7762-4808-bb64-c7274e011694", "indicator--d3164886-723d-4621-9c9c-f96e91554c6e", "indicator--17aafb1e-c0ec-47d9-810b-1400df2466a4", "indicator--34dcc26d-292e-4eff-b1a2-90d0a9066dbb", "indicator--6c484040-7610-4011-a189-92e0239913a0", "indicator--5a80f9de-75a1-4872-afb8-c5007cc8a154", "indicator--eadb9f9e-770d-4751-bd3a-1c9b9c770c6c", "indicator--4a815e05-71de-45e3-bc01-68809a4fd295", "indicator--51427002-7c51-40b5-9dee-7ea00101b9fd", "indicator--57de9921-0e15-46ab-8f91-0fe518dfbfaa", "indicator--9d9454c3-1cdb-4150-bddc-a46bc7112069", "indicator--e08533b6-5fec-4029-beae-fd4119688047", "indicator--b075d8f1-0a97-4177-a676-81155d717869", "indicator--4d892873-a408-4376-a2e5-1f536c34c39a", "indicator--5e153dc4-6e7c-4060-b771-418911c29360", "indicator--16b18fd7-5380-4276-b817-605f106360cf", "indicator--eb6fdc3c-181e-4eea-aff6-a2e92142310d", "indicator--22400880-c563-4a4b-888f-0cdd11c1c617", "indicator--2ee3955d-e8ec-4589-b542-d5f693dd0bb5", "indicator--0e5405ed-4d42-4ad0-aa86-19dcf51f71b0", "indicator--380fd145-4662-4d23-80aa-ea5810a02e1b", "indicator--effa397e-d234-4b74-a107-84c88bef8ad8", "indicator--dd5bf089-600b-4b13-9e4c-3b87c10b56bf", "indicator--3e992b29-351a-4c1c-8526-7be40c3f6699", "indicator--8c4c2970-88c5-4257-8799-47bd9ed444b3", "indicator--f1617624-71cc-4007-9c01-415564d88d5a", "indicator--2d62a3cd-e19e-4df4-8806-c6b0355ad68e", "indicator--43a369fd-81d4-489e-a9fe-4f81c26e4ba8", "indicator--0996f7d3-d10f-4629-bbcf-654d91937c93", "indicator--550c0fd5-b608-4539-933f-56d09705503b", "indicator--843d1b3a-b55a-4192-ab9e-0c95c6f37157", "indicator--7e9a5124-d43c-4bf0-8a60-c679a1a927dc", "indicator--2a614f26-44d2-46a8-8f33-03704d46725d", "indicator--49e8493d-7503-4a2c-bce8-5af2dc6c816b", "indicator--aae0f144-114c-4bb3-ac05-bc6df9461ec0", "indicator--6a9711c6-03ce-42e3-b168-0b665cca85dd", "indicator--674979f5-f288-4429-aec5-1c1a2a31d854", "indicator--732791d9-4184-4a14-b9c5-58600407ca69", "indicator--a5fe676d-506e-4148-9424-f547af41337f", "indicator--7cc7d453-888f-4132-a669-cfd6080e392a", "indicator--df80761d-5874-49c3-a4db-250b1d49ed42", "indicator--7964058e-6b81-41b9-9080-d06597fe0e78", "indicator--6970e2e4-7618-4daa-ba97-2e4e6c83333e", "indicator--a3fabf70-f7e3-4e0e-be61-016e33f1fa40", "indicator--013be4f4-75ff-4a96-a700-4e847cbd0769", "indicator--84e1e9ee-18b5-4d06-9984-4da8da79b72f", "indicator--4567376e-08dd-46b6-8ee9-0f8bdc51a636", "indicator--d9346f0a-8bf6-4c22-8e47-65df16d094da", "indicator--c048e982-1869-406e-a7ae-e9a4529e07bf", "indicator--94fdc5a5-c38d-4c1a-9053-5fbbe1308e9b", "indicator--d26f2076-7d3c-4dc3-9876-1189cf8a0d93", "indicator--5645fd30-c6e3-4348-88ed-745d6d9d7d0e", "indicator--417382f2-ec89-4466-ae57-84041a0d42a3", "indicator--5b782d8a-64ec-407f-b2ea-12ffacdd140e", "indicator--616e6e52-bd81-4fab-8f06-859a0009b82c", "indicator--cc447cd6-a72b-4e2b-8b13-1dd8c1301d34", "indicator--000a1553-120d-4695-8005-cb2f754bbe76", "indicator--e42a3ff7-5606-43d5-a94a-f9e60888facd", "indicator--36f377b7-7d21-40df-8857-ec43d8de9e99", "indicator--26e6c6be-6460-4913-90d4-59310c7a9f0e", "indicator--9d00708f-a46a-4b61-a32e-7e78facbd9e2", "indicator--44fd5607-bc70-422c-858d-8efaf388d690", "indicator--69056bbe-da12-49d3-b741-e92921d9c9a6", "indicator--dba268f6-f419-4956-b2e8-54b128f1bf45", "indicator--af060755-fbcf-433b-ae8a-0b8d73c23ee9", "indicator--8b51c039-be7f-4204-9941-1e3669192dd8", "indicator--62e45ec7-6aa0-4930-ab36-915c0a8cac65", "indicator--ea762616-1443-4181-ae7f-67d2591c80a4", "indicator--cb84bf61-cf11-44f6-81d3-512df90a558b", "indicator--235eca6d-2dd5-4931-a049-a48da0b78364", "indicator--854c7cd9-eff7-4aa0-89db-026cb039009a", "indicator--3b8f6be4-f6ed-4ecc-bf2d-f277de0d2f69", "indicator--f51c4682-d7db-479f-aad8-d088dfe9a8ff", "indicator--a9b2d410-e569-461d-a914-cf70c210d472", "indicator--73f55c0a-53ba-4f28-b286-b5f80fa9267c", "indicator--333bf35a-39f6-449d-8586-8ebb141ca24e", "indicator--1a29cda6-7be7-4db4-89ec-bba4e2319ee0", "indicator--e20d9366-fb2c-4afc-a269-c793c3eddb69", "indicator--9d10ef71-bb28-4fd9-ac42-3d559b26911d", "indicator--14489ecf-73f5-462a-a8ce-8ef64e43f464", "indicator--33d8c21e-4600-4e8c-8d83-71e22fbe7469", "indicator--0866e71e-8d3f-4d32-8013-82bd3dc32d2c", "indicator--5dbd622e-b167-4564-b863-71d0cc33bafd", "indicator--89ff8a5d-9497-4f06-a5d9-2df29ab2fd5b", "indicator--92880231-b46e-4bb5-b858-a0d1fae76af6", "indicator--11ffcf2a-0821-4337-adc6-94770bb41a05", "indicator--f491b307-2d5a-4824-941c-205cff38178a", "indicator--e73765a3-97bb-43b7-b194-86f4453303bb", "indicator--3a307d24-11a7-4b70-9291-ef305a5308af", "indicator--1ffa72ef-02fd-43be-9994-9e7fb7ec5d73", "indicator--eed540ec-fd8e-42e2-8e6b-87b51fe74185", "indicator--be220927-fd52-4eda-9a48-7eadb367a831", "indicator--ef6c97ab-a01b-4a50-9f23-a61ce765635a", "indicator--d10d1a68-7030-4935-8e2a-dce83c65d88b", "indicator--4a55f1ea-b4ac-49f8-bf09-9de8f7efbcc6", "indicator--29cd0230-7114-427a-b7a0-2a19be1a450c", "indicator--45b2a72b-f2a5-4e02-b153-69ce4dfc8654", "indicator--3214679a-e8be-4da9-b633-3f486fcda6cd", "indicator--c7bbc52c-5c42-4add-a5bb-061959f77a2f", "indicator--18ca43f6-f785-46a6-9724-868f424b4f72", "indicator--3575beb9-55c9-46ae-8cea-2c1258e4771d", "indicator--e39e2cbb-79c1-459c-97b5-a5f5730aa6e6", "indicator--35352d64-a64b-4ae4-98b4-ccad45e8ff3e", "indicator--0171b644-670f-4042-ad5b-0817958b56a3", "indicator--fea285f1-2d12-495d-a8e0-edb35f2a05e1", "indicator--2168ee5d-ee25-44fe-8be3-bcc1b9c0fe0d", "indicator--70e67ab9-4c44-4895-8193-a8acb237809a", "indicator--b33bfb7d-1497-4c53-810c-e45ddd2315cb", "indicator--62dec8e0-35bf-4f9d-bdb7-d3626578fed1", "indicator--e4eb735e-54e4-4498-b9db-38170284d12d", "indicator--85b06fc1-49ae-4623-a5eb-2380670d3d6f", "indicator--3f31f0ab-8dc0-4935-9eaa-34e563e4565c", "indicator--e0aa8e27-02a8-419b-a600-1fc91e36471d", "indicator--18d40a52-a8df-489b-82b8-25b8cef56699", "indicator--9565380a-0df9-48cd-9872-88b5e45e136a", "indicator--dd2a64ee-88fd-4fd5-9e99-fb545cda9874", "indicator--ce2331b3-2cc2-46c5-b07a-496236de8ac1", "indicator--8afdaf46-74c7-46e4-b871-82d1fa9bcc6f", "indicator--125aef38-12d8-47bb-85d3-bf282284db4d", "indicator--a6508ab6-697d-4eb6-b231-3f35b3e7f98f", "indicator--fac7f90a-d0ec-4f01-863b-c4071da13ea3", "indicator--63ecb0cb-a61e-406c-a94b-8e770e8fd55e", "indicator--86cf113f-6f98-431e-941b-c0302708db1f", "indicator--3ee42a93-3120-4e03-a4ee-8c41b6edb6dc", "indicator--23a43e40-170c-45ae-9da3-904402975e57", "indicator--7209b5ae-b94f-463e-962e-ed8913cd9603", "indicator--828a67c3-aadf-4413-9be8-902525bc82c1", "indicator--670ccfa5-cdf3-4fad-af43-5d150f31c3d0", "indicator--d0f587bc-6367-4498-b054-dad43fbbf2b0", "indicator--60e6a35f-cf7a-450e-8758-7396ad8d813b", "indicator--9e8b0c89-304d-41fa-9b0a-434eca648456", "indicator--f7e80da5-fc86-4f3c-8566-eef4b1f2e1f2", "indicator--94e70c2f-1aa6-4ea5-a5fc-17185a5820e8", "indicator--960480f2-f530-4e70-a6ca-240f0e10f4d9", "indicator--8cc262ae-fe7b-4b46-b20a-eeaa7a32caae", "indicator--88d5c743-d670-4f90-a27d-97a6d5c0a678", "indicator--93d180d0-8317-4574-bb4e-68d21fd33801", "indicator--4f0270ee-6caf-4dd8-9275-d193bb2f66f2", "indicator--1e453e63-c802-4cac-9a19-6e70d29c8ff7", "indicator--94d10d81-da4b-4492-851e-23b6ea01bb75", "indicator--e4555ce1-ed6a-4224-9c24-b5af5ce4add8", "indicator--a851e890-3dea-4224-95e4-21e2a6a94680", "indicator--876b33bb-1491-43d8-8dbd-52073e52c414", "indicator--fa2e0d6c-f737-4452-8a59-f22038e1fad9", "indicator--b7118163-7e4d-43ab-b1a1-b37619f3856d", "indicator--532e3881-b171-4680-a96e-1e69b2467689", "indicator--31f8f2b6-9c67-400e-adaa-8b007f58351c", "indicator--70123245-5d19-4574-987f-adf577559a00", "indicator--66728c4e-470a-4b8c-af5b-1e6531d00bd6", "indicator--bb6f6202-7d8c-49af-a499-e66ebe383ed7", "indicator--e42fc154-e9a9-46fa-aabe-410f91668035", "indicator--2d68ff7c-4591-427b-ba43-c5ed5bee58be", "indicator--bf07ce51-805d-4951-afd8-03d874d4f7f1", "indicator--49ac667d-5da7-4ccf-90db-7f6d81a5c84c", "indicator--ee5b2a23-1135-40c6-90b2-0ac12bdf1319", "indicator--659c08ed-1107-4a3c-8a77-628f0f21edc2", "indicator--be8db0f3-439b-4a64-ac8b-ad43cda478b0", "indicator--5e05769f-7372-4378-b8ce-e1a089324d44", "indicator--662fd85c-e023-4b66-9d50-ef823cd22e2f", "indicator--a6c0684c-9833-47ee-be3f-97c16ba49503", "indicator--17c9e52f-5a84-4430-8d7a-c1b6acceb8a2", "indicator--55d05660-6181-4d7d-9164-33a5aa7d7062", "indicator--66ee285b-d421-4b2e-9f99-7d65c5ad33ba", "indicator--47e06d9d-7ce1-4dad-811a-995f6b74ff1e", "indicator--4a2daec1-0648-41fc-ae05-ade0c4049ce7", "indicator--f066afb2-7b8b-449e-9f94-e8c7b225dd9f", "indicator--c075033c-e48b-4aa1-a856-4ad6630e1667", "indicator--0341d19f-f104-43ad-9998-be6b493ce42c", "indicator--7659bcd8-4df1-4019-b1d9-c8868e0aa0b8", "indicator--21db5d8c-318d-4672-ab0a-33d8df591b29", "indicator--5d31de10-bee1-41d1-bc22-6ab05ceb6671", "indicator--65009f33-d2ac-409a-bb92-387bc2f642da", "indicator--6df91e6e-3736-45b2-aeea-1cfd4fc02f62", "indicator--53fc2a58-de2d-40cc-830e-266b495a91db", "indicator--5858329a-3b25-45b7-b0af-db3a881c1c41", "indicator--3011accf-308b-46bf-a3a6-6f162db12b46", "indicator--7d2a2065-9cdb-4549-9d8e-6183dc4e21a2", "indicator--b5b9fdbc-6429-405c-b5b8-5418c6963163", "indicator--c515058e-6db8-4cca-9373-34d4567cdb4c", "indicator--b7e7c79d-67be-4396-87ae-eac56b242377", "indicator--a4d382c2-bb4b-4a06-b01c-203fac162ccd", "indicator--51dd7d8c-3dda-48e4-a746-b6ba4fe58b20", "indicator--ad7cddce-4d98-4840-8491-13cd3ccabc61", "indicator--7145b74c-ba11-4a7e-8bdf-b462cd6ec971", "indicator--c220e5d0-4435-4419-8528-f94761e0b16f", "indicator--107ce088-5df9-41b2-a4c8-5ba7c35ddcc0", "indicator--2303b60d-2789-4a2e-9141-08fd902b6ad7", "indicator--cfb81797-67d7-413f-bad2-50b63ea42f0e", "indicator--c36699c4-4fe2-4907-a8e5-b4a5dcf3882d", "indicator--b7d91464-9a58-4661-bddb-05781f025d76", "indicator--545c2e59-9be4-4673-b976-266d0953dca2", "indicator--8184fc63-1b1e-4710-9f3d-696306fcc30a", "indicator--c4340fb5-ed9c-47e7-ae70-7316a815604a", "indicator--1e447d71-caef-4978-9a8e-d165db651e94", "indicator--d589697f-bac7-4c4e-a2a4-0e66af8a1b97", "indicator--110a4691-a2de-4790-bd88-549180451517", "indicator--e7b7102b-4227-4041-aa2a-96aa2dd148e8", "indicator--b9a1cde9-5744-4cae-b296-20de1742f1b8", "indicator--bb6fe9d4-cad4-4d88-88ff-194399edb968", "indicator--0d131e22-e357-43d2-bbab-fde9025a2b34", "indicator--64f35d59-a4af-409b-9be2-5f0aa92cd05f", "indicator--3ac004c9-e650-4217-81ec-4470d7e819b9", "indicator--3077bc63-7949-44b9-b33a-a93e85a7dac1", "indicator--f77e6b68-eafb-49fc-acfc-f3d5f5280d93", "indicator--ab82bd0e-5604-4719-b91c-397124bfe3c2", "indicator--df6f2b3a-148e-4d07-8aa8-7503bd372ab7", "indicator--09037948-15f9-40b1-861f-340791ca53ea", "indicator--716690a1-32a7-43f7-83ea-59936185043f", "indicator--72b000da-eb1e-43bb-9c90-9e68362c7d67", "indicator--df5fc7ba-904d-47da-8730-f87b8eb51b1d", "indicator--18ebe7ed-dd4a-48a2-a0cd-701772c74205", "indicator--51027ea1-1364-44fa-a834-dc692b6ba1f3", "indicator--13392857-ccdd-4e57-a09b-a4b0f58107e1", "indicator--c5b61cbf-2934-4017-9375-d0dc714fa8ff", "indicator--399dd644-b743-4f95-88fe-53f0121f277d", "indicator--a37e1273-1c76-48f2-b868-891225a87c29", "indicator--3274aa32-3790-4c58-bc16-1f60f4b0e57c", "indicator--108941f3-1720-4edd-bce5-b4f1556fd9d0", "indicator--dce063ff-3ada-4f67-8345-5e8482468327", "indicator--fccfc115-029e-46e5-98b8-f621e69577dc", "indicator--1885a7b0-64bf-4c50-ad4c-d5007fa5255b", "indicator--9d601fc8-035c-4e73-a75c-650ab087740f", "indicator--09383f24-b9d2-47c0-8de6-89813ccb7c76", "indicator--81056962-19f6-48ad-b238-3683e8bc1645", "indicator--35ece3b9-9431-405f-8935-a0e27561f0f9", "indicator--86a86152-c83a-4c6f-9f3d-f993f96c34f4", "indicator--89b2663d-470a-4994-917e-64193d6c98fb", "indicator--3e2d492c-6505-49a8-b35a-164b6aab2186", "indicator--392a258c-1d29-4a78-8207-ecd32b0a4375", "indicator--adc4b2bf-2cd9-4dbd-bc95-787ba3a7278a", "indicator--cf5d3f78-472f-465b-9ce8-de3c23979d4d", "indicator--4a699d25-8c3d-48a2-b06b-d9a7724bd484", "indicator--538795a1-faaf-4d47-8d5e-63bcebbf669c", "indicator--3071efe1-5445-42a2-ae17-a02494e5ba3b", "indicator--9658417a-f7db-413e-961a-0f80db1edb51", "indicator--56567e29-ca88-478a-b19e-04b04f5f1590", "indicator--57b800b1-131f-4ed2-9f03-d90e097607cf", "indicator--0d861572-6b4c-4386-9b70-70b4247e06c6", "indicator--a031638d-c87a-48d8-9d52-2dbf92ec0ddf", "indicator--120bd8c3-b0ef-416d-b2be-fd51c3a1361c", "indicator--2d6460d6-6292-4f7a-a51d-7a2fd45566ee", "indicator--a845dd88-c6fa-44ef-a9eb-972b4e18810f", "indicator--34f95020-68fc-453f-96f5-ac82766e3ef1", "indicator--6c629f2b-9316-486d-988b-b3eab120c21c", "indicator--00215e47-f593-4529-9d21-0803b3b20676", "indicator--99b10843-6497-47ab-9bc2-633851ea6214", "indicator--33fe65bb-87dc-4e8c-a75e-0610441312c5", "indicator--b6b08249-2e21-41fb-9685-e48a7df9f07d", "indicator--de614e55-c521-4900-9d3b-8c990c07f97e", "indicator--982a4cfc-2d18-4018-beed-f35fe16063e6", "indicator--b06baf0e-0d6a-4a6f-9422-a9cfa5ed4d13", "indicator--e0ceec93-071d-4b1b-aa5c-d4b8440287fc", "indicator--2c32fdaa-4c76-4a1f-8db9-fdd8be9cb2ff", "indicator--c1dc41d3-9882-4047-ba5f-3ad7e71ccc01", "indicator--d72df7ac-df0d-499d-99f9-941c8953801b", "indicator--996d610c-13c8-4038-ab68-8fbd4c662206", "indicator--a7fe4c80-5e58-49d3-80ed-26b219067445", "indicator--8efc4c7b-c1f3-4aa8-86f8-05c780a0dc9d", "indicator--01ac8be0-028f-4751-8269-b99eaaa4c84f", "indicator--50d71833-0b87-4bec-bf24-bfc68129fc5d", "indicator--97ff130a-ecfc-4445-8ce2-2c027f1f5c71", "indicator--f0656da4-c91a-4e44-b6ba-4ee842eacff7", "indicator--560ca814-876e-450c-bad1-f6d131877dda", "indicator--aaf20910-de5d-4945-8f84-3fc58cf88169", "indicator--b99dbb7e-8ddc-448e-b8d5-79eee9940cf7", "indicator--0030cc6c-4bf0-4e63-8dc1-12045c4dca52", "indicator--75e418bb-c073-457a-835f-0f8f71a921e6", "indicator--66048635-e33b-4055-a27c-240b0c1e86da", "indicator--5ba2a808-877b-40f4-bbaa-82845c84da5d", "indicator--133739e2-893c-4e78-b287-11448a255aa3", "indicator--c3f587f9-87fd-4224-b49b-e73d935daf8b", "indicator--b0c34094-bc07-454b-b5fd-ea7d7c329d26", "indicator--d94011f2-c95b-4ddb-82f7-b9eb0b2c1a38", "indicator--c6f0771e-80a7-40a5-be09-2a838d10a913", "indicator--6a20885c-1bdb-48a0-8bb1-84b4de9da34c", "indicator--474aa2c6-a8d1-4ed2-841a-f247142cd5e9", "indicator--b395f927-36f7-4670-8a58-2a9e2f8251da", "indicator--321a74be-ed86-4198-a164-37968eac6a84", "indicator--65737dbc-9dcb-408f-a7d4-2890d0c8ff4b", "indicator--dc65dee0-7c80-42c6-a93b-7a4b671bdaf9", "indicator--dd0b9d79-fdd5-4c8f-9eaa-762e3ec892dc", "indicator--ed2f40d4-6b49-43e2-9adf-f735a3372e32", "indicator--e206f2f7-ba01-47b7-bb8c-e66ff40de234", "indicator--2f1147f2-0bee-4a99-92db-ead7a3323488", "indicator--fe4e0782-c1b1-4c11-a080-071e18af0280", "indicator--d83e8354-c2c8-4e84-a685-c8f1c31069fa", "indicator--2b913ab6-4c7a-4698-9ca6-d0602261026a", "indicator--f8aa3019-d29b-47ff-bf47-95ed94e24c7a", "indicator--ce90b6b6-31b6-4285-b914-fc88372cadd1", "indicator--b47d5eda-c693-4eeb-bee7-c803c611365d", "indicator--c1139fc3-8ea3-42f5-8a87-d50c429ef1cf", "indicator--c8c2d7f2-2d02-44f4-ad42-04a696958e22", "indicator--32ad2339-b33a-4568-b273-31fa41ca4fdd", "indicator--8cc427ed-7253-4627-b59e-75c9d279a61e", "indicator--55c1a645-771a-451a-b8f5-443dd7beff95", "indicator--1eeb2538-8b23-49c5-8b73-d44a92403ad3", "indicator--2465ec50-4319-4006-b509-7e54539871e2", "indicator--04a01bac-8ffc-4c22-9d41-86c09859aff5", "indicator--a0d856de-6c1b-4be0-8f50-3be6598b2b8a", "indicator--eaeb0c77-bf51-4317-a250-d114952d2d6f", "indicator--96017d3c-c627-45fb-9f6a-6d03cea4208c", "indicator--0b7134f7-17b3-4e08-a4ee-b1c5a8afa955", "indicator--4fc4c4ee-f88f-4fab-a2ad-1355b3f77a74", "indicator--dc5f47b3-37c2-4e68-a26c-fef4416986e1", "indicator--3f3a1853-c10e-455e-be12-cc24482a61d0", "indicator--2128e97b-5755-4d26-b9ee-53d00ab6bebb", "indicator--b9751608-4921-45eb-bc60-e7e48808627f", "indicator--4ac80f57-3684-46f4-b6d5-5301f9d0820b", "indicator--6c54a79c-8f49-4092-831f-a2dded1af01d", "indicator--82731ed5-8378-4c0d-af9b-15d19504b625", "indicator--4be91488-86a8-4517-a1da-a09602e5e7f6", "indicator--d21b3b10-78f3-430e-8cfc-0c866591dc77", "indicator--8727a3b5-684d-421f-a6c5-63ef782931fa", "indicator--2e6f6e29-3789-4bef-9b5f-338dc1ad4b72", "indicator--c4d962e1-e79e-4626-aa7a-ef05fc537460", "indicator--67162df7-84ee-43e7-a2fe-6b2e4f84ab07", "indicator--99a65c14-3067-4ea4-b9ff-739bf42b2c28", "indicator--856a196a-9600-4adb-8ec3-fe4887824bc5", "indicator--4f7f6ea5-11ac-4fdd-90f5-2b4a8953d7d6", "indicator--1a4ceb86-33bf-45eb-9bc3-da3d0f63bd23", "indicator--2b837b62-0e8e-4f71-a509-1fd14b91d1a0", "indicator--4c8f3bbb-2d2e-4992-8c16-9766fc55cf5e", "indicator--44af911d-1060-4909-956f-85fdb2d5c4e3", "indicator--e3f64198-1162-463b-aa30-1d8824cf4fe1", "indicator--698a7e14-e8af-4188-ba44-1431a539206a", "indicator--3b09ec89-c139-4882-bca1-e3015eb40c91", "indicator--05e00dfe-7f3d-4bac-823a-9709d1064877", "indicator--cbe72911-8063-4ade-8dad-f39c190c9736", "indicator--bf2409b9-8068-471b-af79-84751e6ab745", "indicator--5e1966d2-ca9a-46f9-ad7a-284a1d0552aa", "indicator--6dc820b0-2ccc-4f14-b614-da9c4627a9c1", "indicator--f7370010-7400-42bf-9105-139ec7d6bf60", "indicator--7b1ff47b-1566-48cf-8236-470f98229c2c", "indicator--dbe4f13f-aeb8-477f-826d-7fa68aebb623", "indicator--2ce72ffc-9a3b-4340-94ea-aaf83f1a20b2", "indicator--d4ead738-0507-46ab-b503-b16c810300da", "indicator--eec973ca-dfce-4c90-b441-84debe9a48a2", "indicator--0eb65df9-99e2-4786-b7a4-a51a2f899f62", "indicator--cf4f2d66-1180-4207-a0e4-2d5c23bebd73", "indicator--41f5ec0f-012f-4b68-95dd-73b447f4d337", "indicator--ef39da99-0f70-4a35-8650-ce70916e24d6", "indicator--192e0e60-eb05-4698-9827-af30904e7d52", "indicator--c07aac82-0222-4ff7-bdaa-d78ec79fde5e", "indicator--d0628e0f-80db-4cba-9b71-3466eb6293af", "indicator--27f54a7d-4a85-4f39-a52c-3067eee3b564", "indicator--f4b666eb-b4e4-45aa-930f-90c53c8df5c4", "indicator--756fc2b3-78e5-4ead-a5e3-2a9b85c40016", "indicator--6be76c7f-2d4e-49b1-bdc5-a5262ffa74bf", "indicator--c740c0bc-d99f-4a13-9813-02f55762e5ae", "indicator--81726ea0-954e-4455-8e33-5208903a4a6c", "indicator--57486e6e-12de-4059-83db-0434ed6fb2cf", "indicator--38d581ae-8815-4dcc-a4f8-96f7dc882eaa", "indicator--869f79d2-26c1-4d9d-8c13-986a5ecbdc1d", "indicator--5ace182f-332f-49ec-a5d5-95dbd72bd6f6", "indicator--d457df8c-677a-4f8c-8bec-72f0e7f01b2a", "indicator--20e21a72-002a-4afa-851e-4eb7926733fd", "indicator--eee499bb-383c-44c6-9912-f0b3fae71676", "indicator--a5f69e84-b41d-4e96-ac21-53327c0c01e8", "indicator--c7eb3760-dca0-4652-bcdb-01f64da78851", "indicator--059d1185-028a-4585-9610-7ad90904235a", "indicator--7c613bf8-225b-4c5b-978b-4e8ebcf329a6", "indicator--87c0a2ed-4743-4680-b27e-6dc534f6867b", "indicator--c4605794-3831-4dca-9ca4-b10978d82037", "indicator--7586a3ad-07cd-46da-a292-e309e675264d", "indicator--017bd507-4439-45b6-b506-d71ed87ee1db", "indicator--40bdbd07-039f-4273-b966-c7c2192125d0", "indicator--04387a28-8d79-42ce-97ac-33c2bae52093", "indicator--b7ac5d48-930f-43df-bc92-2f48513b84a1", "indicator--ece894d7-0a26-4e2b-b82a-60647222edcb", "indicator--cf30bdb5-3417-46af-80f1-8aad55bf38f5", "indicator--be903e31-5152-429e-8b58-4b7a08ac885f", "indicator--b980a846-fea0-4d5e-8a4c-d1b45d89ff85", "indicator--4df076f1-bcee-4a6c-8758-3344d8ce3a14", "indicator--ae7f3739-4d26-403e-969d-25a83281ac27", "indicator--33c1e3ca-a267-42b3-95a8-8320b8c39e44", "indicator--10820ab6-6f9a-4a90-bb74-de95af6a66c3", "indicator--f354aa59-d3c7-4b87-a98e-9769bc0fad64", "indicator--267ca86e-8ab3-4f89-ac06-abf03aa713ab", "indicator--ece959e6-67c1-490a-962e-a48f4b31b8b6", "indicator--2769134a-9954-49c5-bca2-4339a49be99d", "indicator--c70b3d03-6cc9-47a6-af47-031c69e9a31b", "indicator--65cf5875-f7dc-4795-9a33-e1d72c7fc53f", "indicator--677f79f7-e69c-45b5-8c37-7c77d5c524af", "indicator--9e7b8385-b493-4a43-9190-825f67d559ac", "indicator--799bcc25-8c58-4c69-8dcc-a1b9982a07c9", "indicator--8c75d961-1985-4209-a0bc-e5f9f0556e82", "indicator--645a5c51-1eed-4f85-a355-47b36bdb188b", "indicator--616e8842-6826-4964-a382-a4853ea53560", "indicator--b3c934e5-1e98-476d-95bf-755093de80df", "indicator--eb4ed07d-395e-42f5-85ca-9072a07bc894", "indicator--4fea3360-a02d-4d59-8235-6208946c456b", "indicator--a5133e6c-4ee5-4db7-90b1-4646d477fb8e", "indicator--246d4329-4c46-4a1c-be78-39570e483d7d", "indicator--7c64f76d-63a7-42ce-b383-7b1f3dc2da4b", "indicator--622479ea-d550-401b-942d-2b29b732128e", "indicator--3f1c500b-15fd-485d-bf0f-c9418348f216", "indicator--1ec298df-bed6-4a69-8f4d-d794138533c9", "indicator--ea634bf7-e659-498e-a86d-9c6e8975cdaa", "indicator--3e8bc56d-1e62-4a83-bbf8-3b5410ba1d1d", "indicator--eed72fe9-76bd-41cf-8e36-cf991f43f3af", "indicator--2e07e2f6-59de-47e3-913f-59a74f3c9a38", "indicator--b008f060-00b6-4f53-8566-264cae6b8ce2", "indicator--900ea705-7416-4459-ad36-821eb35fc854", "indicator--3baee386-28ef-4363-a8f8-5af1ff5c008e", "indicator--725ecefd-a7a8-4eab-9de4-6912c4662d8d", "indicator--c91f80f2-712f-466a-beb4-84658eb68d82", "indicator--3f689c50-a5cd-47e4-bc02-b98a1dae6578", "indicator--9dec0aeb-6fe5-49d5-9301-306d123cc418", "indicator--783fd481-92c9-4b3f-a856-40a864bc2ed4", "indicator--9f78e43f-fcb8-4e22-9e04-fade3b0f12b0", "indicator--47c6c234-6be2-43e7-a5e7-1e76ee46950b", "indicator--0df68e0c-4da4-474c-88f4-17bec5895bbe", "indicator--8932829c-e533-4a00-b52c-49ae6035fbdb", "indicator--057040ba-a550-43c6-abbe-552a35b52568", "indicator--884a8be5-3170-4b29-95c4-923e4c298fd2", "indicator--31ba5464-5769-4548-891e-4f4afbd1070d", "indicator--bdfa51d1-a815-4664-9173-0a061eb86880", "indicator--ecffc7df-b4e8-412a-b951-c88afb8c89a1", "indicator--cfd0e621-c82b-49da-a2e9-331c9823c2c8", "indicator--3c90ab03-f0c2-4601-8c87-11da8fd0aab0", "indicator--89ff8739-a37f-4066-8620-cb3cf225509b", "indicator--3a6c41bb-4521-404a-9ddf-a02cddba6c84", "indicator--5639d896-84c6-4b68-be14-ddede0b85563", "indicator--4001eafb-c3b0-4042-ab6a-75070a69935d", "indicator--7eabae64-72fa-4d3a-857a-823cefef3f3a", "indicator--b5825035-cd90-47c9-a5cf-e63b72eca9fd", "indicator--392c3f9e-8a39-4f5a-b7b6-d65e125a5c74", "indicator--9b7e103f-b87d-4666-99a0-1c5d4f963412", "indicator--05ba7e3c-0a63-4f1a-94ba-37304e902eb7", "indicator--dbbbcb23-6b21-4571-afd8-cf00eded4e9f", "indicator--0dab93cb-ea5d-48b5-b7da-dd529e0b7e6b", "indicator--ee62f632-35c9-414b-88ed-8a2a15eb82f6", "indicator--363a08e1-ae5c-493e-bfe1-36c4e9d34d69", "indicator--c449884d-5234-41e9-a529-c816c84a8797", "indicator--85fcdd77-fe8f-4bd2-a230-cafa38e48ff1", "indicator--587251e2-291c-486e-94b6-69fd52dfba1f", "indicator--4c923440-67d8-416f-9d52-b09028503917", "indicator--79db312a-7177-4592-82e7-d137c1041a8b", "indicator--93295aef-400f-4775-8381-fdf09da86465", "indicator--61a00e22-977d-4d3c-a768-2db3b855b734", "indicator--74008eaa-0497-45e4-a645-17092c9cd712", "indicator--d423b034-936f-4e55-99fc-36f4bea44afc", "indicator--b97e0408-8858-49bc-bb43-47ae9d6b135c", "indicator--7717880a-5699-41cd-bb58-b79c736c94b7", "indicator--8977af5a-3fc6-4ff0-9233-b75a09c4dcf8", "indicator--702a1e9a-08fb-498e-b96a-f3980d1c41a1", "indicator--1e42ff28-a61b-43d8-b4a1-58ff3ee1486d", "indicator--ca24d273-05c9-40ac-ab26-9a518c373a39", "indicator--c42206f2-86c1-436b-8105-5df02efd06f2", "indicator--906d59ce-37be-4d3d-ba0e-72e808ac1215", "indicator--98876a46-9408-4c11-aea1-a312b568eed8", "indicator--17092bd9-44ff-4935-ae28-b98183375b67", "indicator--eb8bd845-386b-426b-9438-5bec5285c3d4", "indicator--0589b2c9-8367-477c-b27d-06ed73230160", "indicator--f33a64b3-c718-4fe6-a645-52a5e0efd764", "indicator--3ddcd1da-abb6-4899-ade1-147f9c4321a3", "indicator--51b47d1c-b7e8-463e-8efa-6debeefa8bca", "indicator--c9549c08-a62e-4c9b-a411-37d272376a88", "indicator--11cf9226-bb99-4d3e-91a3-72e29d99f7cb", "indicator--203ebb76-fea9-47d5-92f8-24e9a0302a68", "indicator--d9d87f56-33e9-41c0-b014-c73aa38e24ef", "indicator--d6b72c15-149c-467d-950e-9c8fad67507e", "indicator--53b94eca-fc0e-4cd7-bfb1-69436a3301d6", "indicator--eea45b51-0482-4084-b003-fa55a3105605", "indicator--e5ab7bd8-6e54-4c29-a6eb-bb50b1164376", "indicator--665f8c0e-3ca1-4088-b201-1ce585587ed7", "indicator--721dd036-a04f-47b7-be1c-4a6d755c4534", "indicator--d730fea3-eb59-4521-bde1-7cd05bb6fcf1", "indicator--b982fd56-ff32-4fdb-89b3-dce2bff4c1a6", "indicator--0dad73de-bb3e-4312-8a96-4c7392729189", "indicator--96665b19-d56f-48b6-b765-1303aa87f222", "indicator--dc40d4cf-3920-421a-93db-09ed4279ed95", "indicator--2c4fab68-0e04-4b43-ae7e-66180cc1f460", "indicator--b369cf93-a5c4-43fe-adfc-e855add774e9", "indicator--3b23a7db-56f9-48fe-97ef-c715f85779ec", "indicator--f0cb4254-5ea7-4c30-a63b-57a9d8872702", "indicator--1773cdb9-0113-43bd-87bf-c76dda00d0af", "indicator--ba644f58-0dcc-49a8-a191-4c7b72464a09", "indicator--ef504167-ef7d-4883-97e6-3be2ccd608fc", "indicator--7150bd06-1457-4c77-8c6b-68a61043e65f", "indicator--86f5735c-c960-4da8-9071-b9be3110047b", "indicator--7c38d3a0-21ce-4da9-a73a-366bd79776db", "indicator--6dd44069-c14c-41af-9f9e-b724566c22e7", "indicator--686340b2-9b4d-4583-ad95-ce61d302225a", "indicator--b25ea5fb-c6e4-4e14-a39e-ac43a927ae4a", "indicator--f4dd523f-09eb-4e65-88cc-84cfd73d3792", "indicator--6872f87e-e993-43c7-a4e6-1d9b6c6c11b2", "indicator--1cf85461-1f6f-463f-b572-6c14ac9fa4e8", "indicator--9a39e0f5-2795-4783-9538-3e205b1ff932", "indicator--168d099e-1c18-410a-a299-a0257b19ecdd", "indicator--615dda85-fb05-40a2-81c9-fe022212d8c8", "indicator--6918d3a0-4a74-45c9-a6a6-80099d5c49fe", "indicator--1cf06b66-d52e-459f-8816-166e6d7db850", "indicator--b8a19e54-08c4-46be-badc-34a7d2f40e65", "indicator--71f355db-895d-4c8e-94a9-9f8acece3cd3", "indicator--95ea4e3d-08ae-4e86-8822-413835f3037c", "indicator--bd94845b-2b71-474c-85f5-2a1fea49bdfb", "indicator--6f7e307a-093c-4b79-993d-9ceb7bd7b281", "indicator--f89a09aa-0701-478f-8dfc-e2fc94997290", "indicator--b6185952-147a-495c-8d23-fdd9a44b4c2b", "indicator--73e1d605-b326-48dd-852e-c7ca000dc42d", "indicator--9a499b15-8424-495c-b6aa-c7c5335cbc2d", "indicator--db5f8081-09a7-4a35-8e37-a740d0126789", "indicator--a7778cce-f459-41c9-81ce-741803dbda7b", "indicator--9bd445f7-3036-4305-a11c-35d0a9319957", "indicator--ebafe09e-fa18-4e0e-9b8b-9a65d70b7cc9", "indicator--336f5a15-5841-4caa-86b9-e00a9926cbfa", "indicator--fc7e86c1-4c75-4928-88af-0728dbe5b204", "indicator--74bcb7ed-d973-4254-99a0-d730ef69cf86", "indicator--e0ddc3b7-18d8-4859-888e-97dc60cc0341", "indicator--d9caa765-9a42-4b39-b613-78d3ebba9b89", "indicator--7165fc1f-c848-4f4e-8b60-c1e1dca6db0c", "indicator--f61bef24-d8e5-4f77-9df8-291c8a3fbb04", "indicator--ccc319de-830b-4b33-89eb-a3c202a1de31", "indicator--2b4861a3-9331-4158-a82c-462eaaec4f5e", "indicator--2ddaecb5-36e8-4b42-be43-e2613eb66e46", "indicator--a11ea025-5a9c-4882-a5a2-ab15f0535c95", "indicator--d57d5a66-a616-4f17-ae75-368152dc39c8", "indicator--4135d768-e177-45a0-804a-53744a8ed1b1", "indicator--0240e1ec-3a31-4ac4-8b81-ec203e300e29", "indicator--ebbd6016-1a2e-442e-92a3-ed45c561cd90", "indicator--709c97fd-1229-4ab5-85ed-5d974b350271", "indicator--4cf8e61a-416e-4cfc-a680-c162133669b7", "indicator--76a2310b-9ea3-472c-b802-a6de8ab7de9d", "indicator--8d51a00f-e5dc-43de-9eba-63cf648a577e", "indicator--e3eaa797-aa29-40b8-b8a6-9c59c1fe6bb2", "indicator--917c22e6-0a42-4325-97ca-7a587ae314e6", "indicator--2f485bc5-98f0-41e6-9198-698ad8e8fab8", "indicator--f37ad4f2-947e-4e0c-9bd1-0fdcd47af3d1", "indicator--6557259c-3dcd-4f98-a694-7059de66f6dd", "indicator--31093637-ac52-4a43-b238-2c58c528c315", "indicator--4e7e1001-bf42-4591-9782-f144cbcb5bd0", "indicator--40ce8994-0a1e-446a-8d72-40de7049861c", "indicator--9868b68c-11ea-4733-a42d-43c031490b25", "indicator--2096c2b9-4cac-4096-929d-44fc9280e3f2", "indicator--187c4800-9d3b-47fe-a1f2-4f200eca357c", "indicator--7e1c7ba1-efdf-41c3-aeb8-0de6cfd5722c", "indicator--0bf583ec-8748-447a-942c-9ca6081b3161", "indicator--7eaf69b7-1afb-45a0-855e-59a1f8ed917e", "indicator--6c9532a3-99da-4ad7-8f13-28ff6441b63d", "indicator--5dda06b0-1dc2-44da-933a-2a67d28bbf2a", "indicator--919b07f7-576f-4ec0-b088-d3cd27adb0a0", "indicator--bf92e373-dadf-40b5-9a28-609a1bd16b44", "indicator--31949891-a65a-4745-bf76-3c49414d10d5", "indicator--9e48aa76-ffcd-4bb3-bfbb-3967f05752a7", "indicator--fd57ce2d-cdd8-43fe-891d-7990b33086b1", "indicator--b00ed911-73e4-42d9-9360-45f10a08347c", "indicator--e332454b-592a-427e-997d-69c32b025e99", "indicator--8308cf0b-68ef-465a-9b2b-1be1c7553556", "indicator--41f45798-5641-4a5f-be5b-de1adafddb51", "indicator--36d277bb-e29c-4012-8565-148f7d2d1f1b", "indicator--9e02ec9c-312d-4bad-a5e5-465f9b4e65b0", "relationship--57d811e5-e84f-4fe1-8573-d03a1fba7bca", "indicator--7b934431-7e43-4093-8919-174210b2c2e5", "indicator--edc5002b-f2e7-4d6d-8aee-53565fa2f810", "indicator--c65fa123-21fe-4362-bdbf-88a38c4934ae", "indicator--1d9eb4d0-6117-4fe4-9c24-1011ae1ee6ad", "indicator--4bdff2f6-df65-40ef-b733-d0ab57c8ef50", "indicator--c707c038-44e1-40b8-a643-81c22ed0400c", "indicator--3e5f7463-f0cf-45da-8c82-6e6d23c38d4a", "indicator--80d246e7-63f7-4b6f-91cf-afe69df9bade", "indicator--efa74019-ddce-4d79-a832-45ec9863ef40", "indicator--5ab1f2aa-7611-4100-9595-53aea157d74c", "indicator--f92350c8-0106-4260-aab2-de2436cad4ba", "indicator--0067c864-afbc-4445-b015-f9e6fecff5e1", "indicator--6271c369-e757-4c02-9315-0f93b9d91a86", "indicator--fcb6ab83-fdca-42af-8224-c6d918ba0851", "indicator--8e7f38e6-8d2f-4514-a681-1ed5523f9fac", "indicator--abca8df1-0215-448a-ae6d-0cb69f911bd5", "indicator--910bb730-0fb9-4295-928b-76a2b76bb185", "indicator--6dae51f3-0e83-40c3-9798-6154368982f8", "indicator--d8340aa5-74e9-4518-b48a-95d8d528dda8", "indicator--be264b58-9a02-417a-b4f6-ede9cc20b55a", "indicator--86981f3d-9a32-455c-a38a-f4ec10decfd0", "indicator--61d7d22f-255e-4002-9750-bd281df6275e", "indicator--2b9dab71-6eda-4e56-afa9-8579f060bfbc", "indicator--e4e0e7dd-3c5a-4533-91ad-70323c11dc23", "indicator--46b2ff6d-8a1e-4c81-ab27-97e77198fb67", "indicator--a44ea605-c462-4ae7-868e-629bfdb8ae5b", "indicator--8315e7e8-513a-4b18-a691-f1fab3d485f3", "indicator--79f38a1f-f9fa-498c-836b-a07e7d00dd84", "indicator--5e2d1924-e209-450f-83ac-40c3b0803e4d", "indicator--2d3d72e2-62d8-4ff1-b78e-694f71c526c1", "indicator--de247362-501f-4f33-a2ec-295756b0999d", "indicator--d67fd8fd-211c-4091-88d9-cbc11f6de0a3", "indicator--0f0dcc9b-86f5-4bd9-888d-cd29202ed070", "indicator--d3130e97-78b3-4625-a0b6-3f35c5ba1f53", "indicator--490d5910-ce12-486d-b3ed-cff3f44ef500", "indicator--da9aab7e-650c-4050-a810-93397980d68f", "indicator--074526e4-326a-43b8-baa5-5f3f88bcc0f1", "indicator--7359456a-aea2-4a96-be41-2de494939f08", "indicator--d4d45971-d396-4ffd-ba56-9df0e6cd3867", "indicator--c7a8e771-5b76-4a27-8595-af51f5072923", "indicator--20270587-e401-49fc-a0b7-56999cb89fcc", "indicator--8ca109e0-c241-4506-ad4f-fc02c00e794e", "indicator--d55d052d-1cdc-46d4-a1d1-a84191fe2afe", "indicator--e0b72045-1d89-483f-bd47-bf55d5af6a0e", "indicator--5c8ba205-cd6b-43d7-bde5-373f631c7461", "indicator--e1c6e5e1-8b1b-4f25-a59a-21f58b41949c", "indicator--6a746940-90f2-4134-808f-010fe10b0973", "indicator--bf1e3fdc-5643-4e93-bb4f-f2ed82ce6c1c", "indicator--c3225b18-903f-48ec-8075-59bd788436cd", "indicator--ea4203d0-7bbb-4bfd-a0aa-aa0c6e082fa7", "indicator--33eed6be-4f9e-4498-8cd0-383f591b5c46", "indicator--dedd0b5c-1ec5-4490-88e1-edd7df6fb105", "indicator--d4c42ed3-e988-4042-b8f5-bd8f4233a15a", "indicator--359693d4-1f82-49c7-8be0-e3f82c37a7a2", "indicator--967cf649-502b-4ecf-a686-d6bedd67a1da", "indicator--e46f6045-5b77-4ffa-8ac7-24ea427f9fe2", "indicator--bb17524b-9426-4145-9e92-bfdaf6754830", "indicator--7a45f908-e54e-4ef3-88ff-5fe8c07c4da2", "indicator--642f726c-f9dd-4cd8-a7f4-f908fea17c1c", "indicator--4b6bbf10-0f0c-4b6c-8b6e-6d25e021b44d", "indicator--698ca6e6-8f3b-49c5-931b-b5699667177e", "indicator--7c3fce91-340a-4214-880b-997caaa4f46f", "indicator--2253770b-94d6-49a2-96c5-c4825e001722", "indicator--27c237f6-15c1-47b9-b16c-951515e7c8cb", "indicator--17ae70d3-b0c1-4820-b8dc-c79058b10de3", "indicator--dbf17dd9-0068-451c-b526-300ac8dafc3b", "indicator--5bb68abd-0fa2-4de0-a0d9-5c6231ece1d6", "indicator--c70bc34c-81e5-4af7-8bb3-1951f3f791f7", "indicator--12a580d1-8f7a-4c91-874b-e196d6eca04f", "indicator--d4e5347f-32d3-45c7-b295-ac03fb634f5d", "indicator--3cc07e9a-c14d-4abe-872b-45bc16dac6b4", "indicator--42fcb0f0-d8cf-4cf3-9311-e6fb3cdf5ecf", "indicator--6a9819f4-279e-4cf4-bc33-aea3dadc89e7", "indicator--80b9183a-f170-467a-a3f8-558e4e185857", "indicator--60b51328-b5ba-4ac4-bf92-1842fb345f42", "indicator--a7f59113-3fe8-411d-85c3-bf8903f1593b", "indicator--d8d40a1e-b42b-4350-a4ff-e09cd2c1e108", "indicator--6054ae1b-36f9-4d13-9240-f3ad529d3bce", "indicator--be3e2172-2f5a-4222-b081-9b29a719888c", "indicator--cc7fcf71-4a76-47e2-a766-e1e722f93516", "indicator--9d5f8199-dc44-41f3-8736-565232c26d0f", "indicator--0777d702-c14c-463f-846d-73242bca3825", "indicator--7c4ffdf7-fbf6-4aac-9e06-80e72b80dabc", "indicator--23d0c427-7409-41d9-a851-072bf57809f3", "indicator--86af46b5-78aa-4e02-bac1-d6a83567857c", "indicator--12940604-f6e2-425f-9172-63584c815ea6", "indicator--46a7895c-f6d3-4357-a993-766c718e6575", "indicator--fe90f0b2-c8c9-43c7-8ee1-248721a5ab2c", "indicator--8bb5664d-0469-4b36-a754-6b0ce83b1303", "indicator--cae2791a-eca1-432d-8364-92de25dadaac", "indicator--017c06f4-fe8a-4809-9cdd-1f476b0f89f8", "indicator--b13f21cf-cbaf-4b56-97fc-612e4eba7263", "indicator--60878c23-d169-4c27-913f-3b841be69c93", "indicator--ddc40a40-e508-47e8-af36-37819eec38d8", "indicator--d585fed3-1f7e-407b-98fe-4cde7c9b717d", "indicator--4b51ea2f-45af-403c-8409-acbfe07767dd", "indicator--d49cc268-31f0-4ee3-a1d6-12c8579bf66e", "indicator--beaebef1-331e-43c1-baa1-f8fda6ecb3bf", "indicator--4b779a70-8492-4106-8e56-185c188b3e18", "indicator--e34697ce-0b98-4fab-be78-361aadfc7e6a", "indicator--c0bbd977-0dd4-4f60-991d-23720a1851d4", "indicator--008cd6d2-a264-4a67-8135-ac352aebb2ef", "indicator--6595cd32-5efe-4018-8309-10dbcb96f04f", "indicator--0a7783a0-024b-4cf6-9ec0-48892f4e45cc", "indicator--2f8b13e7-ecba-469a-8af8-25ab7b90e291", "indicator--70681f93-259c-4f09-b602-84b9afccbb94", "indicator--6b04dae9-834a-400a-bea1-03cd0f74b494", "indicator--9a76c651-304a-41ed-8ba6-d80cc9fd20a4", "indicator--13d36a50-5d5c-44ac-9477-1f8b5801c9d0", "indicator--f16c50b6-8864-4698-b556-ef019ed43ae4", "indicator--a85f44be-7111-4814-8eae-49cae7120bde", "indicator--3a7bef58-9ea8-42c7-8897-3ddafb5d89ca", "indicator--abca5ef6-28c6-42ce-9b5b-dc656329405a", "indicator--557c866a-55c5-491a-9283-2168036ae54f", "indicator--590c207a-bc36-40ed-b216-9bf3c49907b7", "indicator--1bbbcd12-038a-43fd-8aa1-ce18bae91dd9", "indicator--5472f341-ef8d-462a-8174-b1942a9e909f", "indicator--6dc4786c-bbfd-4bef-8697-e0829574569e", "indicator--1f75cea2-2e35-4a49-8fec-ee615de85c81", "indicator--8eb18faf-7127-4e61-8d0f-bcfa293956f1", "indicator--13a6bec3-1719-49ed-a806-6a9521e5a573", "indicator--f458dabe-4f44-4aa0-84a3-0803388d7260", "indicator--ebc426a6-8081-4eaf-be5d-fda17ed6aa4e", "indicator--c502b2cf-35ec-43ec-a53c-d8969f1d8b01", "indicator--8f44c280-0b74-4cab-9b86-ed34443811b6", "indicator--35255def-621a-41f0-ba51-62e885d1d306", "indicator--f95c0ec0-489c-48fc-9ccd-9af8ef3ae30d", "indicator--c42d0f23-ffa5-4dc1-a03b-8304b5cc8df9", "indicator--0d700fc6-4a24-437d-b743-910f55b334fa", "indicator--50780799-c403-423a-a33e-68c89b50bae7", "indicator--e3802af0-7909-45fc-9f4c-2a1864ce1ff5", "indicator--ac95d536-e79b-49a6-912d-8c357e6a7a77", "indicator--3904b4e5-c67e-4ca5-902f-ac5c26142d97", "indicator--12db0fa9-d2c3-4bb7-a81e-5395b8b45b2b", "indicator--d8df988c-0619-43ef-9623-bba02a6fa07b", "indicator--e9894935-3e7b-4cb1-b2f1-4d2b2e046000", "indicator--6e980075-f328-4cef-a4e9-ac4da0d02667", "indicator--6328b02e-3c58-4d3c-9a2a-2309ffdd0bdd", "indicator--cf7e5f43-5d2a-4c26-bd63-3dc952ca5fc8", "indicator--61c11d2b-48a4-4f6b-96b8-abc3522c0dcc", "indicator--699912ed-9fb3-478e-8d6d-e59a652c3a58", "indicator--76d263ab-8607-4e5a-b95a-69a13ea64866", "indicator--ba12a8ba-4c57-4782-bcca-99ed7f08b8ea", "indicator--17995576-2cdb-4d87-a69c-6f28d6f5e0a1", "indicator--1de545bb-0da7-439b-a3f7-62130feb11ea", "indicator--a204f6ba-9595-455d-a50c-5aaa9b56b5c8", "indicator--cf36be65-27cb-4b54-b35a-e32ef75b80f3", "indicator--3b0928fb-71cc-42c2-a4e3-a4b240b33953", "indicator--b62d11aa-2d4f-43f9-84eb-202b6a974c7c", "indicator--ef81c598-d846-411f-a9ee-f9571f7eeced", "indicator--fc4b0937-6e59-4f10-94db-dff1a17586cd", "indicator--1d1d4af1-c8ec-425c-a7ee-5ca5426c97d2", "indicator--cf188771-79de-4f7d-820d-4f5fc4ac4da2", "indicator--4cd3590f-3271-4bac-886f-58ec4674f00e", "indicator--10f0f598-34d9-43cc-8874-6299e599b1ad", "indicator--5732e015-881a-4bca-adb7-ee97e7876712", "indicator--74b1cedc-9b82-4347-9feb-afc74838c10d", "indicator--613fc8cb-8638-411b-8eb7-d2a4f878eb84", "indicator--b6e5becd-8a84-42d0-b695-c37fe1888d6c", "indicator--73db47c9-d0fc-4fcb-b76c-86121d4257d0", "indicator--8b3681bf-b267-4010-96c5-1f363d6b7bbe", "indicator--0fbf89d4-b58b-4aad-806a-c86b815077fa", "indicator--1b5c98a0-3188-4d75-8f4b-a43b2587f49b", "indicator--b0583e79-c9f4-4317-af7e-d92ba454d36d", "indicator--c12313f0-0b0c-4b3c-90a2-3db5f5ef790c", "indicator--3047be31-64ab-40c9-babe-8469756257e0", "indicator--4197e33b-9478-4ed1-a391-80913e6d8219", "indicator--a08dc936-2b2c-4674-a917-459bffcb353b", "indicator--7489468a-8d8c-41c9-9832-46f82d7613d9", "indicator--4e7c6f90-75ab-47d3-904a-6c777d097b5f", "indicator--27e452a5-ba7a-4bec-82d4-5a05042278e8", "indicator--53ea7dbd-223d-466f-a647-6e6eaa91c19f", "indicator--e7ffc855-dff4-411d-8c2a-ed03092fbdd5", "indicator--e0664ea5-3c98-4b17-89d0-8dd028dd6706", "indicator--6a613b75-bce4-4cdc-92cd-952c2a28b7e0", "indicator--baeac255-4821-435a-ba3d-8deda8dbccc8", "indicator--4a0b6ac0-421d-4503-a3ee-89348bbe5566", "indicator--cf8442c2-9c73-4d2f-9257-082a76756d3e", "indicator--7d55361d-b617-46d2-b7dc-4577f2c40b1a", "indicator--f6b61c9f-4ec2-4faa-9e99-9dec4fa28285", "indicator--ce7c4110-f13b-4cc2-9f0b-9255cb0018d0", "indicator--67efc518-8933-4682-a836-bfb413652588", "indicator--cb4ea45e-6f44-4f90-8d96-d7f3665e00f7", "indicator--fb7846ca-7d21-4eab-a097-4cb8c586e660", "indicator--69df5c99-5b4c-4984-9845-810061895db2", "indicator--354fd60a-b615-491e-8d2e-8f9dee822b8c", "indicator--d5c364c7-78c2-4e43-9cb6-de5d053f034a", "indicator--d5bf0370-4b74-4d35-88cf-dd9badffeb18", "indicator--bad1f2f7-d591-4a05-8212-11cd9694fd02", "indicator--09e57ad7-c8ec-4cbc-a3f2-13e6fccd52c3", "indicator--cc369980-802b-4af7-b171-608b23dc147c", "indicator--3b5a425b-e233-4a7d-8ae5-130007bd3901", "indicator--bc205e31-bb02-4284-885c-2a43c8b9c9dd", "indicator--a46296bc-f4c2-4f5e-b7d4-c560edbeb06f", "indicator--e1fc008d-94c3-4636-b378-844ac0cbeb90", "indicator--2ea5bd2a-ca7b-4e26-9a5c-32348edc2a57", "indicator--b22d5a3b-0eeb-400e-b9f6-ab04303ff3d5", "indicator--4c4c275c-848c-4cab-a9bd-7760002e8546", "indicator--91a87f03-5135-45d4-92c9-f73e7a723f06", "indicator--aadc0a76-7303-4841-9656-bed3951bfefa", "indicator--a151fada-42b8-44aa-81b9-e55249b82399", "indicator--5c8150d0-26f4-4bc9-b710-ee05d42d0852", "indicator--801debbb-6e81-4491-9625-686541dce8af", "indicator--a9d9f53c-90a0-4757-a3c3-291b30fc64a4", "indicator--b67273ab-0f7f-4758-9a21-e680b8c117ca", "indicator--3208fe8d-67a8-4e00-823e-6ed958189436", "indicator--f5a39c97-8c40-43a4-8eda-2e17d614147c", "indicator--7c3c1c59-bb37-4c67-a1ae-2a1ca1393815", "indicator--a914db90-3194-49d0-a04e-f9e34432fd7d", "indicator--0dc6312e-2cee-4113-97f8-804a9e6ae8a8", "indicator--fe1db302-69d7-4ff7-9f61-bc3727d429fa", "indicator--72e161cd-3352-4323-aa7c-8c2fe3b452b6", "indicator--bf0ec9f4-1686-4196-a911-fc5c08f9e053", "indicator--b4e4e4b8-a74e-4f7f-9216-bdef3c015fdf", "indicator--477de23a-9862-4e95-9873-4f2d17582162", "indicator--799896af-075b-45e5-beb2-db7e66f85bd8", "indicator--3300f67a-bdf0-46a3-93d3-69608eaa1b69", "indicator--670af077-d09d-4eca-9ada-bbc4d3d83ec7", "indicator--4a56cfe5-a609-447a-8431-81d303fc3943", "indicator--ff3f9bec-61be-480b-8501-bc86a583c4e8", "indicator--8011a4a0-962b-463c-8bfb-67c611dd8c51", "indicator--3c038598-f6a2-4c37-84cc-6f063bf51bff", "indicator--b3d4b7ab-7160-4585-ae6c-e4b7b44796d2", "indicator--fadfc7f1-dad8-44b7-b51e-4900ab3179d1", "indicator--e19011e4-4f05-4272-b6c6-3b4adedf4141", "indicator--dfbf55c2-faad-479c-84e9-fda7c8df8755", "indicator--714c42be-4e54-4d36-94c7-e31cd9ba2c98", "indicator--18fb2f1b-19b3-493a-9f3b-6aa1b52d7547", "indicator--2f85961a-8dd5-411b-b5d5-69347f9123ab", "indicator--460b8b81-7475-4525-ad5f-dcf33f9d9304", "indicator--b00e9c42-dcbe-48cb-adf1-efdfdfd3ee96", "indicator--da8ba8a3-0959-48cf-9047-46bb8c6ff95e", "indicator--45cd6b18-10cc-4642-9a73-b547a8e66ce9", "indicator--1c240d69-f1d4-47fe-a7db-c4255a2750a8", "indicator--c6d6daae-718a-49a8-b5a1-2cd796ec20e1", "indicator--5405ef90-a659-4f26-9583-80d925a21d23", "indicator--4ff9a442-4f55-47ea-94ba-fc4182ad6e02", "indicator--381dc898-3ca4-4249-9db8-9231282de215", "indicator--ddf40ec0-2b3a-4173-9ae3-58cd137425d3", "indicator--755b293f-0b8e-45d0-8222-9a88376f3249", "indicator--9494ad32-9c41-4329-917b-a887484b1dbc", "indicator--c6eed5ac-d3c2-487a-9637-be8df75c8018", "indicator--62767422-dcf1-4d89-83a1-3776aa18c570", "indicator--a16c1055-32aa-48a9-8004-d7397d2300dd", "indicator--de53b524-cc10-4821-a056-9028b1022d7b", "indicator--30cc3f68-4828-4b47-9f9d-455fe8ec90b4", "indicator--db4fccf8-aed3-447f-b8dd-ed5af1056cfd", "indicator--5c689f56-c76c-4c22-8c93-41b7dca5f307", "indicator--13ad23eb-cf56-4a84-8bb1-31d7563bcfa1", "indicator--e2ee2815-59b9-4030-b449-b41270fba986", "indicator--8b64c3fc-dec2-46d2-abf4-eda2422024cf", "indicator--2c8abd1e-9c21-4c2d-9812-883421aa62cd", "indicator--51137ee4-995c-481c-9ee1-b49ca374360a", "indicator--0e92b2ac-91df-495a-9ec3-5a8dc7310d81", "indicator--eaabaa73-5ded-419b-aa04-0fe9643d43da", "indicator--53190ece-6408-49b7-82f1-74426c197d84", "indicator--12be8236-676a-44d4-825c-69d8719977d8", "indicator--8229d7fe-b4e8-426f-9949-3aeb1e97c776", "indicator--29ae2dac-d857-4264-a6c2-8abf627418db", "indicator--991c881b-bd42-4626-8f5c-4fa73b850057", "indicator--b8c34900-375a-4487-9ef6-4552326afced", "indicator--a71803d4-01ed-4a14-8a1e-31bba6b46116", "indicator--674e9512-efec-4219-9ddb-4d2ec7d4d64e", "indicator--248eba49-01f9-471f-950f-95e7483d315e", "indicator--dc85e5ca-c38c-445b-beb0-27234c891bc5", "indicator--3c36fd4e-60cb-421c-82ac-e8b93235dbd8", "indicator--64591bba-adbe-4a60-863f-c5b4d47ac8d7", "indicator--542a936d-4f65-4ea8-8e2d-f4dafbb7dd81", "indicator--982a6c24-c543-4890-9767-d0f4c52597ef", "indicator--e937bd67-b52a-40e6-a325-2b62313ddb71", "indicator--55ecb19d-8999-4c59-8dda-d478ee32444f", "indicator--9a796190-6c88-4fba-95d5-b41fe66f4678", "indicator--1660ac2f-dd58-4020-8565-0f94ffd785d7", "indicator--cc264f37-4451-432f-bb43-026b25834746", "indicator--0e6e5cc9-e35a-4646-bc9e-09f031cf3d96", "indicator--7ace0b6b-54f3-4845-8535-796a4d3faf95", "indicator--1de442d9-fb1f-4171-9cdc-595f603e58d6", "indicator--ceaac199-ee42-49dd-81ce-2ae3a7ef157a", "indicator--40fb975b-381a-4db7-b9c9-aa55bb441636", "indicator--0c779f14-7863-4bed-a7c5-2285011c2368", "indicator--7af27ceb-fc3d-44d2-a094-1285352ae8cc", "indicator--f9810f67-bbef-4f5f-ac29-bd034028cc9d", "indicator--e670284a-1dc9-4039-979c-6c3c37513874", "indicator--479d393e-d84e-477d-bcc6-c2f09ea7c397", "indicator--6e36defb-314a-46de-ace6-d62781008ec3", "indicator--181a28af-9e1b-4da0-8e63-69fc059b1f23", "indicator--f447cecc-e312-4ac3-9d75-23645f7a8c55", "indicator--1dbbd42c-4c7d-46b0-ac89-374e409e4c00", "indicator--695daab4-c29e-43fe-89f8-7ed2f77adde9", "indicator--3d98e4eb-f731-4b62-9270-71b584a7f3c1", "indicator--00254cbc-88e7-4a2a-87ea-2bc1508b5667", "indicator--511cb801-cc82-4795-b3b3-7e7c247ccae6", "indicator--eecf8301-b110-4bba-b1a1-0c1eb2ac0f75", "indicator--6fbea31f-9a58-4dbd-a0cf-0797144a2d4a", "indicator--3731d883-34c6-4216-aaad-bd9992027cd7", "indicator--2a62206a-95ab-44e3-b4ed-8424dadab3fc", "indicator--4ea23d4a-5f33-4f81-bd4e-d7e23fbd8436", "indicator--5544f928-0761-42b4-884b-9a22cb82bd26", "indicator--15d73f95-6129-4835-8678-ec38ca135db8", "indicator--dae7ed43-aefc-4fae-9292-dcf50abe5d24", "indicator--ed0efb23-a99c-427c-a012-3b9ee712bf16", "indicator--3f619f11-553c-4084-b1c3-b382591bdb36", "indicator--12a8e42a-3601-435d-9d3d-25259e5423aa", "indicator--0a5817a7-e938-44f6-8a40-41675dc3c7ee", "indicator--4f1ba401-9aa0-456c-84bf-10138418aec0", "indicator--b126181a-4946-4f0a-902a-9c15623efa45", "indicator--fc2cca9e-1ac6-4dc5-8018-bbece016a109", "indicator--d1e9fa4e-a51b-4b32-a88c-d11c922f30cc", "indicator--72815a9c-6d29-4809-9c6e-c87ceb863455", "indicator--d091d771-bb62-466b-8751-365bc182d185", "indicator--f8abd827-8547-4859-9ad6-d2368d179300", "indicator--b2b75324-4fbe-4045-92be-56bd53b5f517", "indicator--22e720cf-1325-4847-8a91-c97ddb3d058a", "indicator--54b78513-c2b8-4bdf-bd4c-57bebc6ca49c", "indicator--3ef469e4-64ca-4658-b1ab-dd2903529bd9", "indicator--1d8e9e6d-defa-497a-82bd-9d46c04cae09", "indicator--e56f1f26-34b7-4f94-a511-4105f37e06f5", "indicator--b69d5c2c-e778-4721-bf55-69474c170a83", "indicator--ff3a0079-9b2a-4e1d-a572-371f91b521e2", "indicator--e4fcaf69-b5ea-4215-8674-c20dd97e79cf", "indicator--60d6d22c-88aa-44f9-9e28-04d8ba01a05a", "indicator--cac1ae4e-d43b-4567-ba54-da3dd08e6f7d", "indicator--ff5e7d44-7b45-43d8-afba-8dd2d29129f1", "indicator--817bab0b-f1d8-4a98-b270-8f9408b42742", "indicator--84514b80-f648-4fd8-a0bc-c3d6b97b3456", "indicator--b488a88f-d7c7-4b4f-856b-480d03c6b097", "indicator--56f3ce03-47de-4775-9a79-3766bcd2b1a7", "indicator--7e1adffe-d97f-43bb-b0d3-2347e4925a7a", "indicator--25c48d8b-4485-4353-b66c-3678871bf1c7", "indicator--c992477e-f653-4e1d-941b-6cb45d01d844", "indicator--473c3e60-e0d0-4134-a045-d9135ae44318", "indicator--e363d775-c18b-47f1-ae8a-b916dc949f91", "indicator--e8f520ef-cad4-434c-9810-d90a736da25a", "indicator--9904a540-8d14-4ebe-bb4b-45b38c9c3edc", "indicator--cd1513e2-a217-4ba2-ae50-7dd9f7794781", "indicator--2d788b1c-b252-4339-be60-58fe363cb2da", "indicator--6031f20c-6e06-41fd-8ed2-af4fc7462541", "indicator--0a59865b-03bc-4305-b0ed-360a36f1dec4", "indicator--4a15a6fc-d63d-4c7a-b174-fd664405be08", "indicator--08474934-c0e8-420a-85f2-9fb3fb4cd912", "indicator--660775e3-bb67-4356-9aa6-79dd3c408aea", "indicator--568dc27b-7afb-4828-87e1-a6971e4efe36", "indicator--7499f2c1-6fbe-4ba1-a53d-69ce3a5b2b39", "indicator--b76ccdd5-a412-4f5c-acee-4d2467e3a321", "indicator--12b16e40-18a2-44b8-9f03-209ddfa8d157", "indicator--4d6fedb5-0d73-45e0-8086-b238356ab611", "indicator--445207cc-4205-4a40-946e-9be55b31e8a6", "indicator--ca123af6-3231-40e9-885c-306b15452832", "indicator--6453d749-3c5b-4649-9a6a-6ed60a6812ea", "indicator--c49b4881-92f0-49eb-bfa4-9ea99eb67447", "indicator--af778f0a-2a09-499e-aa62-eb06090ef1ed", "indicator--78e9c102-5c79-4dbb-89e2-b65d8adf68ff", "indicator--05466d88-07d5-4de3-8d5e-668fd8930572", "indicator--d0afeff0-d2cc-4a87-997c-a6461e281135", "indicator--efa4b175-bdd9-469e-a181-36bd850a56ab", "indicator--3d6e911f-4bf3-4c20-9a6b-ad4357136233", "indicator--943b3da0-f52c-4036-b04b-624c9ffdaafd", "indicator--504bb665-e678-482b-a992-23121dc4a948", "indicator--e59eebae-52cf-4469-ae62-128a37ea8caa", "indicator--073f0ebc-ab8e-4ec4-bd80-7b1e32de3fae", "indicator--333235f4-8eaa-4121-a20a-93453104d926", "indicator--c6d60ab4-befd-4f5a-b31b-eff59e39fff7", "indicator--ec20fc42-e0f9-44b0-a886-2ce2bb97d328", "indicator--efb990aa-6c76-4a73-acbd-65aac78b5478", "indicator--6af4a760-6263-4775-a7ab-20b3df0fedf6", "indicator--9bd88ba5-4129-45a7-93a8-5307fed068d4", "indicator--0895ff24-7262-4db3-bf16-1a02db557f41", "indicator--2fa2ad90-9b11-4a7f-9cd1-cfd46b6ecdd9", "indicator--c4b5c758-8a09-4549-94cf-c3ca29670c5d", "indicator--e2e8bb23-71d9-4ffa-bec8-1ac3eaef6ebe", "indicator--26c6a7b9-8d84-4ad0-ab86-c6ea04e3d03c", "indicator--82eae10a-80ba-43d2-8186-e0726a41148b", "indicator--966cb844-a65c-4286-a7ca-b61c6ef0592d", "indicator--3d13f07d-10bd-448d-b10e-e51562a19844", "indicator--0cd61106-2da7-457b-bfb6-f8c63e6287e3", "indicator--ebe6678c-0367-429a-ac5b-cf1e2392bbb4", "indicator--6b8c253e-e3c9-4d8e-8f50-9c823cd43486", "indicator--b55df42c-7c3d-4da2-843c-411976f50618", "indicator--34c50121-59e9-4d96-a477-114c84cf7071", "indicator--3afd01fe-45c7-401e-825b-29a46eac3f6f", "indicator--0195aeaa-b800-40ba-b43b-6cfd027cc7dd", "indicator--b65c343b-2110-4c40-a546-0ef73066a0e9", "indicator--ebe9f769-22fd-4b40-bbbe-deb829e41b39", "indicator--24894dee-8b53-4b35-b8c4-aa21119c7c0a", "indicator--0bae9c59-4532-415b-8ab4-406e03a8ecfe", "indicator--a0993aa7-0da6-441d-9b03-06cf66be358b", "indicator--7774bee9-96de-4dea-8b0c-bbfa363c69d5", "indicator--c1c62e22-5fc8-4e50-b4df-d328f876cd67", "indicator--1576f100-beda-411d-98df-bab04bf9ff2d", "indicator--d23b7909-0322-40b5-ad0c-91354d65aa8b", "indicator--49b929a2-ac1b-430c-9539-6a87bf7373ce", "indicator--c9f81756-8f21-4443-ae53-09e4db3a2e91", "indicator--35527829-a8a5-47be-98eb-974338a228b4", "indicator--df674a49-c8e0-4a3d-b54b-50a441c193b8", "indicator--9aaf47a2-096d-495e-8975-a056f253327f", "indicator--567d03b0-d6b8-4795-b760-bda4ec5ea87f", "indicator--4312ce11-cbc2-40e4-b616-9a4fb9d81ab3", "indicator--0f343b48-d800-489f-bc6f-fd071c4bdc29", "indicator--351f19bd-0cef-43be-982b-503b325244fe", "indicator--a204d27a-94d0-466a-a669-bb11a5d62889", "indicator--06655b6f-169d-41f5-bb41-cf5603c801c3", "indicator--c0ce9d17-9cf3-48e1-9bcf-5b78a07b0071", "indicator--f77dd7a4-8bbc-4dbc-8730-4b5dd9aec0ff", "indicator--78610a26-6b5b-4140-ac42-3e8bbc1155c3", "indicator--fea3257e-9465-4543-ab06-0196ce5966e3", "indicator--e035281f-71f7-492f-ae63-99e1404a7f27", "indicator--7444a0b8-ce92-415c-81f7-d36138b91e36", "indicator--99226b32-1e74-4eed-990b-2925a3a8e133", "indicator--edcc8112-0f2c-4484-8354-8b6659589581", "indicator--166cf69f-c965-4887-bee3-a9086f8fad30", "indicator--93600801-80fd-490c-bb72-04a02fedbafc", "indicator--27e1fdfb-efb5-4c59-b725-ce0178ee3bcd", "indicator--756728a2-24ff-4ce7-90b2-a4f3e60d1598", "indicator--3e832544-471e-428e-a4ff-60fe6210f2e0", "indicator--f6936a2a-f783-4071-ac56-d58a487fa1f7", "indicator--48f63458-679e-45f8-8db3-4e87450b2a22", "indicator--b29d265b-f80a-40af-b62b-a3a6c3f09b93", "indicator--80c08de0-af99-44d4-a3b6-f9378d58f262", "indicator--ab63bba1-513d-4b49-a601-64690bedb3c1", "indicator--1aed382e-6a19-4531-9199-b084b0454c43", "indicator--5045b078-fc95-4dcf-bd60-b5a4b2ee6978", "indicator--d9b8c1f6-9f95-43f3-9869-00bc057f0756", "indicator--7a019b01-8c35-4559-8e29-f846e1cfdf86", "indicator--3b02ed52-c447-48d3-8771-1e9e64b7960e", "indicator--53e93003-3a88-47a5-8fe8-166c77873981", "indicator--f2f8853d-c61a-49fc-8d2b-07e3e7e10366", "indicator--2feb057a-7702-4dfb-8d70-59730e42a85a", "indicator--8c57ffa3-766d-40eb-82cc-8469b16430be", "indicator--bdef740b-4620-4cef-a40c-5781e62829b2", "indicator--a418ec1e-c4fb-4aeb-97a7-96fa05bd6bad", "indicator--cd4b5b1a-cdcb-4f3d-b406-82334c94cd5e", "indicator--6cfe2965-e110-4db4-8dd3-5510dcfe8472", "indicator--ab80a8c2-49cc-44a7-9639-c056854d3bb7", "indicator--e3eaccec-37c0-48ac-9782-61d73eaf96d0", "indicator--310fe329-4063-48e3-855c-29aa38626aa1", "indicator--183ba511-3726-4fa7-a73d-dbb99f0bdfa1", "indicator--76436393-5403-4bfa-8863-1770ae0e4464", "indicator--549163cc-3ba4-4126-ab3e-e5f63f6431c8", "indicator--841c06fb-438a-451a-8a71-01bd396b9a12", "indicator--7c869098-18e7-485d-988e-6441df507019", "indicator--8f001751-40d6-4f13-b072-aa1bfe3512b9", "indicator--de9e168c-6978-4c52-9f60-305850571237", "indicator--9f6d6d46-8dbb-4878-a9f8-d4b2b2920cd9", "indicator--1d0a172a-284c-4b07-8f6b-17f58dc0d0aa", "indicator--5183db07-9f59-45a1-b7a9-f4dfc963e2cd", "indicator--b0720246-def9-42ed-ac8d-308b85c70624", "indicator--e07fb598-f35e-456c-949f-268c6d1d4229", "indicator--84355e82-e6e1-45af-a3cd-9cf847e79a04", "indicator--11baa36b-8c01-4c8c-b6f7-7c02624e275a", "indicator--c83c0603-8f14-4652-bc17-c37f715e8376", "indicator--ffbc2c73-eca5-4673-b61c-6934a5b17c1b", "indicator--62768205-56ce-4c3c-be63-8ed1df11f156", "indicator--10cbd613-2bad-4774-af31-173a47bf17fc", "indicator--97883330-9616-42da-89aa-ac3e94360459", "indicator--f279ce6f-223f-485c-9ac4-cce83134e71c", "indicator--d3657180-6704-4d4e-ba97-9ebfba3ddb7d", "indicator--3d441581-cd0a-4af0-9da9-c72935ebe739", "indicator--f6dfdecf-453f-4bc7-a3bd-ae96f3ea4266", "indicator--42ed58f2-7303-4267-82b2-08095680f991", "indicator--a795fd77-8be3-4654-a667-5727ac2bf02a", "indicator--931a80f4-72df-42ec-851f-29f92ebcc321", "indicator--caf14c6e-af32-4336-aeb0-df15a67f2883", "indicator--96da0020-0f6e-4b6f-8f0b-9cddb9ec4261", "indicator--e5acf9de-9661-4e23-ae63-2d214d48f3d8", "indicator--daed50b8-c3bc-4dc8-ad63-3f7d6eee0699", "indicator--400ae7b3-c934-4f67-8486-39a006088583", "indicator--bacfb1a4-8123-43db-9fb7-120ffe931c1c", "indicator--fbbdb140-de62-4207-a996-b1c037eda937", "indicator--8b0b3714-0b48-4256-9f81-d9b79aa99446", "indicator--a2906f8f-bda6-4dba-8c54-72ef7746479b", "indicator--cfacb99f-69d1-41f6-8525-73da9a764652", "indicator--159e9177-8eca-4ead-aa30-cec7476d7a51", "indicator--0cfdea15-b9b4-4a94-885d-2fdc58e61f5e", "indicator--3cb77f79-838a-4855-adcb-60c6e010a450", "indicator--1477d3b7-b22a-4cee-ad4c-bd6d1be029aa", "indicator--9a394948-e40d-43e4-8995-e1e4c930a9dd", "indicator--e502ff00-d4ed-48f2-9206-93a4bc87f9d3", "indicator--9e58343e-5df3-46bc-b3cd-a94c422a37c4", "indicator--98e764e4-f799-44dd-9d07-a7f395ea2400", "indicator--323361fd-7d3f-4749-96f8-dc1295357769", "indicator--30f2b544-c86b-48ae-93b1-b1778265677a", "indicator--5836d483-c35e-4fe0-8f2d-39c9b5761176", "indicator--481437bc-811e-4568-81b8-b280324f80fa", "indicator--ce41360f-2fe5-476d-8d45-5f6e51566913", "indicator--9bace57e-54f4-4cae-8624-e0b2605f707e", "indicator--9d094bfc-08fc-4ca5-a070-3a81a9499b82", "indicator--b2d47a33-bead-4391-9923-29c579459e95", "indicator--5a0da23d-8ae0-497a-b3a2-2792c633b34c", "indicator--df031399-e7b1-4fc2-8d86-2a9035fa54c9", "indicator--841e3839-5a66-4bbf-8f28-ebaf33eb2cb1", "indicator--a2ab8b49-1dad-4dd2-affb-661029519133", "indicator--be74d2f8-9fbc-4955-bde0-57d43cdfc340", "indicator--66b69d29-edee-41ec-9523-4edeaa9ed021", "indicator--2d4c350b-2cd4-43b0-bd3c-107b06b3cb1f", "indicator--712e5bde-83d3-45b9-9e9b-b365d0d9e2e1", "indicator--40433625-8c88-45b7-a00e-74f68b884f12", "indicator--829462c0-0056-4c08-9216-cb0ad1620a66", "indicator--c632f701-8278-4c5b-91b5-66eb09fbeadb", "indicator--5a9c6130-799a-4202-89b4-b6dc61025cb6", "indicator--9c84cddb-464f-4467-bf71-31278dd6de24", "indicator--41efbf4c-6921-40cc-aea4-9c71171623d5", "indicator--4829593a-993a-4d0b-a474-db913f69458e", "indicator--0f4e0424-1941-44f0-b4f2-d58af901908c", "indicator--66da9871-58b8-40df-83df-ae5ea08f364e", "indicator--fccdb43a-0625-438f-9649-1dc471124a48", "indicator--c6d56699-556b-4fc1-a21a-411d204e23d6", "indicator--1aa5a5f9-2926-46f3-beaf-0a55cdaa4f97", "indicator--a7b9689d-dbea-48a0-8186-b975b3944306", "indicator--84b5053c-0ff6-4fb3-a2fa-8b35009c9812", "indicator--231e4ba2-8710-4d0a-a3e5-8c5dba23edcd", "indicator--8461d284-2f1e-406e-b249-2d34446c7c3d", "indicator--80014c44-390a-4337-bf18-dd74a8797170", "indicator--72e7abc4-2bac-4503-bdc2-438bb54ffc7c", "indicator--f856987f-8a29-49ec-bc7a-6d9975c653b1", "indicator--8cdd4f6d-f999-4aef-8098-bcbf724a47a6", "indicator--5f32571b-47b4-4dc8-ae25-448ec7160e5c", "indicator--ba9fe8b6-090c-4542-a2da-5fb9196206b7", "indicator--35edeebb-9095-4998-9725-3bf1432b865d", "indicator--c054fb8e-bc47-44de-843a-9e6fbb51262b", "indicator--2550c29f-a357-47e2-997d-9092ca35263b", "indicator--d2f44f24-d610-44ea-81cc-dc7bda296b5e", "indicator--007ac3c4-b7a7-4746-9681-e3a4d67252e5", "indicator--b26ce83d-1e34-427d-93a7-bc9a6b12466c", "indicator--ff8a53fe-61a4-49a6-be61-1749df548f59", "indicator--78e885e9-0c15-41b5-ac54-626ede9fbe75", "indicator--5ebf16a2-5f61-45e1-aa3c-9814cc8d8d64", "indicator--e477679d-8c78-4189-a8cb-8524c6df4f4f", "indicator--b4fb80f6-2306-4393-a930-fcaeeed1be17", "indicator--7e56e45b-b14a-4e1a-9156-b202fb56c355", "indicator--eaa109d9-653a-4f7f-baff-d5c5030cfb0f", "indicator--a710031b-0358-484a-82b0-602fd584eb88", "indicator--d8ced8a1-9aa1-454d-8322-5eda27405aed", "indicator--9aa829cf-b35a-4309-b732-76e1fac0cc9f", "indicator--541da5d3-56fd-41fb-8528-7cf8b8325d21", "indicator--cb3aa506-1577-4914-b395-84c8b0c6be69", "indicator--938ed493-30fc-4009-8a90-0faae708f79d", "indicator--41452292-a698-49b3-a743-edbdf0bb12e1", "indicator--8a3b0210-91c6-42bd-adb2-3cdfb7eecb1b", "indicator--30a93bcc-c69e-4832-8c3b-640b0c195873", "indicator--f473cab4-37cb-4a92-9d79-ab4c58db91be", "indicator--72359956-ea10-42e1-8e39-ae9ce3322683", "indicator--17c90941-9c9d-4e17-9881-c91776adf38d", "indicator--13ea85f9-6f4d-415a-9483-a58394fb0a47", "indicator--a92e5632-8de8-4fd1-bc40-7a719a73d14d", "indicator--10cbe72c-816e-417a-8b9f-9ee6a42526b5", "indicator--8b18a5e0-a114-4df9-ad01-7a20eb85b183", "indicator--50adab37-d76c-4a0f-b6a1-3bff7150c2c9", "indicator--0ed69cf1-d297-4dfe-9d13-7ff319c28675", "indicator--a980551c-5be7-4afe-b5d7-58bb44237593", "indicator--8909a124-7a70-45e8-b50e-45c595dc32b4", "indicator--380a0962-7fa6-4e74-8aaa-fd55b00a6866", "indicator--32ba2c4d-5a80-42bf-b305-a7f087340b12", "indicator--5f7649d3-58bb-4ce3-8abd-de90b8baa662", "indicator--b38cd065-973a-4fcb-9ef7-b8da94910153", "indicator--10428e2a-b70a-49ac-a996-079c630bb6e1", "indicator--69bd2276-5912-4823-b10f-28abc92884eb", "indicator--d59b5373-bc2e-484f-89a8-05d421f2f705", "indicator--d90be078-75bc-4d3b-89a2-1628bf4e475f", "indicator--6b30424a-7ba1-4a3c-adbd-972efaf9013c", "indicator--973630a9-31bc-4dac-b6c5-3bf7ae361975", "indicator--68b4bf0f-0d0b-4626-8a97-3e1d3acb6d20", "indicator--40280337-b400-473d-b586-5defc5b4719a", "indicator--ddfc63b0-0664-413b-94fd-021cae28221c", "indicator--da1e75a7-38a9-4220-8d2f-1b5a8a86122a", "indicator--07b7d214-4d90-46fb-a4e9-38d4c241f7c1", "indicator--58717004-9c6b-4059-8998-ae4cd85dbb2c", "indicator--3a41a5b9-0fda-4ff8-91bb-c3451eaf21a6", "indicator--d5f6fbef-3498-432d-b00d-238b0c1d4252", "indicator--b5589c70-2c7b-47ad-9f09-da626f2bc5c8", "indicator--52d1829e-7ca7-4a73-a648-f2babe387a0e", "indicator--c661d155-601e-4010-b1b1-df3550d2ec89", "indicator--390aa3a9-18e5-4930-8c93-e2a9a6019f6e", "indicator--86946e11-3fe8-4874-bf2c-5dd6850cc02f", "indicator--95c6d9b1-f88e-468e-9756-383f3f716fe2", "indicator--7e38e1e1-8487-4f8f-b45b-fc7cefe0b2aa", "indicator--772e4748-b6a5-489f-9145-0850f1bf2eed", "indicator--df4c42a9-9db9-4338-aa51-70ca3f17e3b5", "indicator--b3b3c3a3-363b-4ef3-83af-f3bfa6348ee6", "indicator--bbf24def-55d9-4fd9-b18c-9083d116640b", "indicator--8ade2284-45bf-4af0-8b44-f87ca7b442ca", "indicator--f6485d19-205d-4fcc-80e4-165e7ecd6dc3", "indicator--a8902ec8-4995-43b0-8661-bc256f454779", "indicator--8d80e29f-a1a6-49a3-8d65-910c711917cf", "indicator--26f3e42c-a1bd-45be-9634-9fd5bec2b462", "indicator--37c2d687-cc93-460f-870b-94beccfdd35c", "indicator--bef6209b-26b0-4318-9b2e-cb5b2f606298", "indicator--1f35755e-12aa-435c-ac92-296a2238a9c4", "indicator--5290ce5c-7ff7-400a-b14c-72851ff3a635", "indicator--246ade18-0675-4fc8-b84f-92bc69fa2614", "indicator--507e329a-9c5d-400a-8380-bbd364e48f1d", "indicator--5c2dcd18-d82b-4d00-a98a-9da71d0d31bf", "indicator--6a4c6678-9186-40bc-b34a-c3d8fb692aae", "indicator--6c6c8087-54c0-4930-accd-66a5c3de5f78", "indicator--fdce1eaa-623c-4607-b09e-a90807d8201f", "indicator--a86f574a-7e08-4e2d-96e9-7b46c9020321", "indicator--5bd02e9f-35e0-4837-9489-7025fd629125", "indicator--569f9cff-bc4b-4d5f-9610-c0b398594de0", "indicator--0a548dec-1931-4116-a6d0-f5d06f17b641", "indicator--13873064-fb50-447d-a34a-abee7b2f6a5f", "indicator--16ce1846-b174-4c00-82b6-b772b72b69e6", "indicator--856fd317-8c7e-44d4-aed8-3d61455e7217", "indicator--7aa81450-19c9-4f19-ae28-352228288bc3", "indicator--913ffeaa-8f29-4121-8755-ae74bfc6f6ab", "indicator--14863c49-c255-48c7-a9bb-03cf67639e3c", "indicator--898c2a9b-d8be-4a3f-bd2b-4d662223db85", "indicator--64c1e1ce-8d29-4a33-870f-cd571a1080c4", "indicator--2cd48cbf-8ed7-419c-b6e3-d7865829d640", "indicator--57888814-9335-46b4-a9ad-bbe8654fa582", "indicator--54821d15-dfb2-4067-a8c1-4aaf5dc20bcf", "indicator--6e742d33-30f1-4f78-993d-ff188ea804a8", "indicator--31cfdbab-555b-4fe1-aeb7-df621eb91f01", "indicator--d35e5aef-9526-45bc-b66e-053bfa59e662", "indicator--906fc00b-e003-4096-8e25-77da38e5e39b", "indicator--b68705f9-3ae7-4aac-b4b9-006ecf615925", "indicator--eeb11bcd-d9f2-4a5c-8821-99ada043f7a9", "indicator--f6b36184-2832-4c30-895d-f257a7621838", "indicator--7557c3d3-76b9-4a7d-b6ad-2b5c65a347e0", "indicator--4565331e-f94d-4f67-a43e-7d320cde1e2c", "indicator--1b152455-849b-445d-9be0-e189943bee5b", "indicator--1d31be88-dca4-4a81-a4b7-76fba637ba67", "indicator--42ea8c6d-f962-4ea5-823f-93fa26d9126f", "indicator--bee3d74e-e143-4653-9aa7-a27d9f8ab8b6", "indicator--e7baf730-ccaa-4374-be5b-172c72dc082b", "indicator--04aba42b-a0f6-4058-a893-64d3d34150f8", "indicator--b7328dcf-a704-447c-b108-f762968d855f", "indicator--aa9af5e4-e94b-4118-a02f-67d9dca72c92", "indicator--137af03e-9e9b-41ec-9384-c552e63f5876", "indicator--0918fd02-e1e9-461d-8498-eaf0b01e57ae", "indicator--52dbcea0-8e1e-4367-815f-2418faa85e23", "indicator--968356f9-7a8e-40a8-9b20-210a9747525c", "indicator--98146ea9-fac2-467c-b87a-3bdbb499d284", "indicator--ced96528-0398-4a1b-b952-a5bd7bff3923", "indicator--daa4f22e-7891-448d-8629-c42c28a04457", "indicator--fd51187e-9711-4df1-aa8f-fa80295ad384", "indicator--52c2c33d-d03b-4ab5-91ed-185fcb07b5a5", "indicator--3d35ff46-dfc0-4e2a-9f72-d564744a5da7", "indicator--02c90842-f377-46cf-9740-33d8a384632d", "indicator--216028f5-86ef-4636-8449-086645cfba1c", "indicator--f229e8fb-46d8-4bf1-a9cc-e64695a0fa29", "indicator--d06cb74d-a732-424f-9cbb-e72bf0dcc2c8", "indicator--ac4f0da3-41eb-4709-9e82-26271cbd8cd1", "indicator--11ffbea3-e743-46c3-8671-9fa6221971ec", "indicator--991c8104-6beb-407b-ac77-e5dcee95608f", "indicator--49b606f8-1194-4851-a396-2d79435a9e20", "indicator--7eb16019-3b97-48f1-92dc-788d94ab634f", "indicator--84b6e544-5dfd-45c3-90a1-966fd6f6bd05", "indicator--036efc87-5a6f-4887-9be5-f5a05fcdb6e6", "indicator--b4b6f47c-dffb-46b7-a2da-e11033749214", "indicator--8462980b-738a-4a8c-bd0b-0181f7f8e569", "indicator--d468baf7-199d-48e7-98b2-dd60ccd72a38", "indicator--d479d233-51a5-4f16-aeab-791c65c9a799", "indicator--4d6dc90d-516a-4555-ba28-47cd031fd9de", "indicator--7dcbd718-7c59-4a76-b363-498eba1d23d8", "indicator--f3d7e12d-5c0e-4964-b03b-0181ff16ed22", "indicator--57ad493f-0dfb-4f43-9bc8-1545030b447f", "indicator--f8aa5db6-ef0a-448e-85a4-e7db7c93e50f", "indicator--5fc44ce4-5c13-4f0f-8eca-b94fffa3bc11", "indicator--a4c03022-f0b8-4f95-86e5-e303a5ca78dd", "indicator--1472b4f9-d6e0-4e83-997b-3b8b5a89e08a", "indicator--ef60eeeb-bb77-4fc0-b490-e5c676af13ca", "indicator--49b7243d-7ac2-472a-9e9f-58889d26c82f", "indicator--92d9c683-5097-413f-9534-3e2f5442f613", "indicator--d6e8783e-0545-4033-8101-0c1779ba232c", "indicator--a2d1a8f7-ccdc-41e3-aa37-2c486e0a7680", "indicator--db8358f9-3cb1-4659-90ed-b2f562945bf1", "indicator--9554ca36-cef5-435a-80d4-a830d0206832", "indicator--d7adb865-664a-4589-a380-55dc239e9491", "indicator--73efa91d-b914-44a9-bc93-b4e5e3d062f2", "indicator--510926e0-110f-402b-bb53-eaaab6a7fc3e", "indicator--a31a2705-170e-4f85-b582-d7fe378196bf", "indicator--41a30c1d-556a-47d0-9c27-0c38ce6475ba", "indicator--fa794e94-82e7-43df-afe0-2b688c7e4157", "indicator--26e70da3-8353-4279-a50a-954c9651930d", "indicator--12de5b56-46c0-4e2a-be51-14b5f48d30c5", "indicator--e9485c01-dd94-455e-9544-cd5f1ce4a045", "indicator--498a19ce-9d05-4501-adb5-daa7826d06a9", "indicator--efefa5e0-f126-4a60-9221-26ff76046b28", "indicator--df1e4716-b487-4687-8d36-b6d22b2fe1b7", "indicator--072c5be5-a2dd-4561-a6df-3f1a9e2b703b", "indicator--5b81e86d-5554-4477-bbba-821ad55a990b", "indicator--2e75200c-20b6-4f0c-8130-5e63ed9b5708", "indicator--5aa8d02b-1770-4786-9eaa-201a64bcefa9", "indicator--63d4cca9-9494-4c74-9bcd-bb2ec2d872cf", "indicator--c611a23f-0f37-4d92-9bd7-3e23bf31b57d", "indicator--8ba2c3ea-5721-4615-a5a8-fbf1c07c3ea7", "indicator--e9379428-5328-4cc5-8a0c-b21a1cd395a0", "indicator--3e51d65c-09da-407f-915e-5531c0adb7c1", "indicator--527953bd-301d-409d-9021-0bf1b88ab42f", "indicator--4cc9ffe7-51c1-4682-bf98-e42d39b241be", "indicator--e4015a9e-ad47-4184-9a88-549c5d77b1c6", "indicator--39be5322-8a69-48d5-ae45-caf2b5deda0f", "indicator--ded8f80e-1c25-49c6-b8a9-db472bbd7082", "indicator--95ec761d-31cd-4fd9-9cdb-3181077980e5", "indicator--913f2d90-7be6-4def-8645-3cc1e7fc909f", "indicator--c6d575ad-16df-4602-b696-f0426973e09b", "indicator--12590732-c15c-4371-a856-6398f4560c48", "indicator--e442cad7-8e31-4390-892b-36a550178946", "indicator--2ac0d084-9dac-4b3d-8d60-72aeb9b90207", "indicator--da24dc3e-ed11-4985-9e3f-5ba71a8944fc", "indicator--904a2f37-31c9-4da4-ad97-88a59e05d039", "relationship--d9e48cbb-97ce-4e82-900b-20a1fba7f000", "indicator--6fe0c8cd-8798-45c5-a271-215da0c41a71", "indicator--513f13a9-05ae-45ed-9b04-0c642f35c169", "indicator--06ed9ecf-9924-461d-8bb5-82e6f8cc994a", "indicator--5d3ada6a-4ed5-4430-9211-50eb8d740b46", "indicator--64dad985-5253-422c-a01f-89aeb57395c3", "indicator--1f5de001-336a-4ae5-81de-d977b664e9bb", "indicator--67935e49-7b7e-42b7-b33a-ed21b6a7d37a", "indicator--d47476fa-4914-4263-aeb6-4b42c6d4dd83", "indicator--824e1fc7-95ed-47fd-8cf4-22cc3dd0f426", "indicator--0dd5ea94-fc4b-4443-a23e-5ce264ee10f5", "indicator--8aac9e67-ecb8-4694-a5e9-d364fe723c3b", "indicator--589fd068-1e6f-4504-bdbc-a42baf48c52d", "indicator--ab732dd6-1af2-4950-8935-31ae43c5ddd5", "indicator--b34e42da-f818-45ee-a1eb-7aeaacba9afd", "indicator--ef47fd54-e7f4-4105-85c9-566ad0e888be", "indicator--531075bf-e223-458f-8afd-04b5662335c9", "indicator--04c1716c-bc5e-4b99-931c-5acb8e2e13d8", "indicator--92121848-3798-4e34-a76a-9245f4cd76ae", "indicator--76a95cc0-40c7-4092-b307-23f7e7942276", "indicator--1ea42a15-5d68-494e-90bc-0a3c41451a3d", "indicator--e8fd627c-bcd3-4282-b81c-17d7e05a85cc", "indicator--3ca826d0-085d-4abc-899f-480d7befa945", "indicator--c0b76f5e-99c1-4088-833d-44f0ad83280e", "indicator--1fc94b5f-ef3b-4162-b60a-f49616839a9d", "indicator--23d70a7f-d376-47c8-ac31-76a9b3e971b8", "indicator--97a372b1-06a2-4fb1-b3d1-ed3991964d2b", "indicator--a3d2e837-a607-4591-ad25-129e4e80c2c5", "indicator--3d82cdd4-a95c-4fbe-9c20-cb6fba069ea9", "indicator--3246561a-8711-426d-9e97-d0992aeac8e5", "indicator--fd871825-2baf-4208-a451-a07007b18f91", "indicator--e93288ee-5130-4992-b631-54833124e5c0", "indicator--09172abe-c36a-4ba7-b07f-5a44ffe81f23", "indicator--934ed697-2f91-484b-96c7-cbf2c13ec31a", "indicator--1460a385-3859-45ae-80b6-fcbd7a2b28d6", "indicator--72254a8c-ea43-4a1b-a480-d2a4017535ba", "indicator--6e753bc6-4e37-47ca-922e-0942c1173473", "indicator--b3909506-afde-4601-bd9b-b7166b679c0b", "indicator--c9752bc3-6649-4408-8a1f-ef10d176f111", "indicator--d4f66af1-07e5-4e61-b564-a13dbf2d5e27", "indicator--b3f68774-83a1-4ab2-a07d-fd46cc76f725", "indicator--9be37b40-d882-44ba-9c9a-c75d144c5fd5", "indicator--3d0f97b4-5fdf-4ae2-bdbe-fb1574672d8f", "indicator--72960811-4afd-47fa-991b-959f1eb27f37", "indicator--bb6fb5a2-7536-4b03-88ee-d8a882f04380", "indicator--4c210376-3489-40e2-9952-3eba5a3c480e", "indicator--f6b67f5f-2d0b-4929-8ff0-cdab79430580", "indicator--7bbec00e-f5e7-434f-a544-0f80ffb50901", "indicator--2cb3af4f-78e9-4b1d-9e77-c383cc57fca8", "indicator--30b17e85-280d-465b-a6fc-adc370ed05ac", "indicator--4521f10c-48a4-4103-b76e-65cab833d8a1", "indicator--5d4b5bdd-0557-4952-9569-ae17ce8254e0", "indicator--1ef35023-12db-43f9-96cf-01c95cf4ddd0", "indicator--e806dfb6-a53b-414c-b941-b91309bc9170", "indicator--aed2a025-7630-4055-a831-e282053447cc", "indicator--0d3bf752-6f56-4532-8bb6-0d80c1e80fbc", "indicator--adece69b-4a11-432d-8d87-1837a81bb618", "indicator--a3dd66ff-decc-444d-a911-dbfd6e134e63", "indicator--349afa7f-c6ff-498e-b2d0-d59cb78acf05", "indicator--5ce620de-a256-4f1b-adc1-fa2db7360e13", "indicator--ee5729cc-1396-42fb-bb07-abce6e1f4627", "indicator--5ca6583a-356c-40df-ab63-0d972146ed18", "indicator--af102250-dc18-4bb9-9426-f13931adc1a0", "indicator--0ac3e2a9-93ef-4ce3-865a-f6e837891efb", "indicator--25967133-6945-4f97-bb38-5bc1409ceda8", "indicator--d2450989-9e99-4324-8b31-ba0b990a3c02", "indicator--a75a4eae-e05f-4846-bfd3-5467619dbe6e", "indicator--56734030-74a1-4ade-bfa0-c89a9395c103", "indicator--240b6d2c-ebaa-41b5-944d-984ceb2f3735", "indicator--e3e3ba18-dca2-4f5b-a514-d94040cedfcf", "indicator--c1f5957a-37d6-4332-9fb7-3d1c7e127630", "indicator--97df8379-6aa8-4d8c-aae8-211bf49e4833", "indicator--8939e1b1-1a95-4ee7-b1f2-89512231a77e", "indicator--99566056-340e-4c45-a490-eca08a25cfd5", "indicator--0fd6fe94-6753-40dc-bb39-409ea702eb79", "indicator--7ee7abe9-90c0-4496-9687-8e2994823ffa", "indicator--cf38247c-62e7-4772-af33-c57303bb3b57", "indicator--fe6eb277-67ef-4657-b523-cc8479829146", "indicator--785c35fe-8e79-4c9f-abcd-c76933ac90c7", "indicator--0fa2d5d5-cdcf-4c13-9b2a-954eba42a9b0", "indicator--dd37503c-4034-49fd-8015-139698f0414b", "indicator--e29f11d0-ef23-4990-8b41-b73812b4897c", "indicator--11718a5b-5e89-4630-8388-f789a09f7130", "indicator--1d10ea2c-93f5-4dad-a77f-1001974bf51a", "indicator--8d428f57-a119-45c8-a651-4f303d8d102f", "indicator--bdbce0ea-d699-4960-8566-f2d48f4fce72", "indicator--3f985cbd-1557-4cd5-97db-10764c819322", "indicator--7d39c233-a520-4e86-a76f-022478aaf342", "indicator--5d2275f8-4881-41e0-b09c-95fd01fd6c85", "indicator--250f7859-7b03-4a47-87f2-e913dc8ed45e", "indicator--cbb4879b-de4c-42b9-bf42-58995c670189", "indicator--d295853f-1c06-4a10-b17f-fc98bf386d4d", "indicator--fcdfbea9-2ade-4379-b361-f441a25447ec", "indicator--a3906214-eb47-4b99-8113-44993a9dc25c", "indicator--e57bb558-59ce-4e5c-9f77-03d15aac33c5", "indicator--75c8fd97-ff9b-485b-8a52-8b491954fcbb", "indicator--dde9e423-a0ff-4780-a78d-36e509bb6aa7", "indicator--e00a8bf5-2306-46ae-8355-e817cbc1cd13", "indicator--0980a36a-751b-4ea2-b46e-63f49c6de8f7", "indicator--74e75d66-4ab6-43b5-b7a2-36e8038f2b67", "indicator--accc1633-82a8-4d3f-85f8-c751a27281c7", "indicator--8008ab90-7cfc-4b23-9f8e-27683f8e1bfe", "indicator--c705f7e8-1805-4a99-aedb-50f9076fbc28", "indicator--8bcdb98f-e564-49da-be0c-2cdaaf4de3d6", "indicator--fff03d50-92b8-4e94-baef-4929476e9a75", "indicator--266010ba-15c6-4e69-8479-033377b5fb76", "indicator--76eb5cc9-2a9a-4616-aad8-7c4fa818e5eb", "indicator--0c66b713-5ce7-4881-9d99-126548b20c4b", "indicator--44bbc21f-5aff-4699-8749-a96c0b7d836b", "indicator--a400373e-afbc-42f5-b478-912314004b65", "indicator--39402e1e-cab9-4606-a4e4-d9a2089a7b7d", "indicator--01dfd02f-1dc0-4733-9b7b-a1b07a569f83", "indicator--9ec66c89-b840-4560-95ae-42fd90badb06", "indicator--5af9a3f2-5f2f-4645-9404-420e03dff528", "indicator--1e181f97-3e4c-41d2-97ab-e231e5997f50", "indicator--d58e6df5-b1e0-4725-bb53-98d1b4065c77", "indicator--a6b2028b-5559-4b3e-969d-96e3f43882a4", "indicator--9e651993-23bf-4bc8-aaad-490da6ea6a88", "indicator--0c5efd47-1592-4831-b3a5-400eba5ff719", "indicator--ed79147b-fba0-4798-81b0-5d39f1cd9df4", "indicator--9364a3f8-c36e-4f29-a785-bf50d60b15ca", "indicator--dbcf7b9d-5ca8-41ec-82bd-04e5223e0242", "indicator--ad6bc147-730d-4c09-ba62-f436f788cdad", "indicator--6b274bb2-d0dd-4ca0-bb27-13850f7c0a41", "indicator--ea10327b-b957-4ddb-89d4-d96b845379a2", "indicator--bcad481f-ad77-42a3-8b76-1ce1f7de672d", "indicator--1eb1cf19-d6d6-4d86-b7a5-9c938dbe41cc", "indicator--3b9d2c22-b43c-4b77-911a-6b3667b8814e", "indicator--d7f51be9-51b5-4947-9c9a-e7dd34c27ca2", "indicator--dc0fab7d-c805-4030-8ceb-40963ac6a430", "indicator--df39c27b-b478-4396-9a91-55b9202d1285", "indicator--7167df6d-6394-4c2f-bd20-42c089a7ea78", "indicator--479c4cf9-7385-4a59-948b-1997cdfbaa87", "indicator--3a396e29-7424-498d-a2a4-826af649bfbc", "indicator--55a0749a-d641-4544-a789-59a5640eccd4", "indicator--2a358d0f-1c99-4a04-be6c-af2b38f73b29", "indicator--dd5cf7b7-abf4-4151-9f71-89fbba6d2a44", "indicator--68345459-2037-4b6e-9859-9aa923299b5c", "indicator--b519dcd1-bed6-4da1-9491-2ea777bdd1a1", "indicator--fbdcf79a-90ba-4e89-a1d9-31cd287ba3f7", "indicator--99e0eacd-5177-4a8d-93e7-231c1d89d955", "indicator--5b6fdf6a-580c-4c9a-841b-0a6882df27b3", "indicator--75e212e1-e208-4a4a-af38-ce28b9b2e5a3", "indicator--875d5624-8920-401b-b2aa-a1a0bcc9c332", "indicator--9a762a0d-65e6-4dfd-8488-360b086d67b1", "indicator--a6f2ce7b-46c9-4f11-b59a-f3d2571a8911", "indicator--4c8f9cd7-55d0-49ad-b9d5-8e0d8c2a12aa", "indicator--cb489d34-97de-4657-87c7-a606b8790795", "indicator--b514af9e-6cd9-4983-bb6d-b270aa95fcf7", "indicator--2fda95a2-1670-4e7b-b753-7498310ab1a7", "indicator--6fc0e6c9-786c-4f43-8d4d-651fca6bab15", "indicator--2766fac1-93e7-4958-a6e0-4225f39dd72d", "indicator--bdfbf23f-231e-470b-9680-6424a243273a", "indicator--4259c0ab-4a52-4c6a-aa8f-17d687230653", "indicator--142e565a-2549-4cb9-aff3-37662084d1eb", "indicator--9b285761-fa34-4c93-8336-334a74a8969f", "indicator--a5228f31-45f5-474c-8127-588874285705", "indicator--f866057e-11de-469b-bc7a-c179f90d3d24", "indicator--321da151-f437-45c4-aa44-40d8ddd66b14", "indicator--8e61e65f-81f4-41a4-ac3c-dd9fa71a05f7", "indicator--757f15b6-c70e-40f1-affd-b0dbbfc1a66a", "indicator--e66a791c-ad8c-4c2f-90dc-562e407edd75", "indicator--4930fa0c-7255-4bb7-ac19-b5402f67f575", "indicator--b873adb9-27d5-4055-91d5-d827ce2b4749", "indicator--fe7f2575-e894-474e-9259-b6a98e743e20", "indicator--cc308460-00dd-4361-9299-a0bb9e43f9a4", "indicator--366eefef-19dd-4a2a-bc5e-490786c23e9a", "indicator--e77de2e2-41d1-4588-8fda-0b667bbd8c29", "indicator--2c5114c3-4c86-40f1-892d-94c6b09c20fe", "indicator--a27e0eaa-3e5a-488a-b8c2-585275dbb087", "indicator--fd0471b0-662b-4859-a77f-8a19cf14258c", "indicator--3fe3794d-7ae4-4568-9fc3-eb7331c4073f", "indicator--9eb7ddbc-00cb-4f5f-8954-550a7b9a1ed5", "indicator--8fa00612-010b-405a-bf61-94be80b49e53", "indicator--e58e134f-a816-4ef6-bae5-cd7409511229", "indicator--1191e76f-3d9f-47d8-a1f3-3c765b33d746", "indicator--20300759-b159-461c-ab8c-16da6a39d739", "indicator--d7243bfd-3203-4972-80cc-d3a502d4d11b", "indicator--4c6c3d96-5bab-43b4-ac4c-bfd8f7e32f42", "indicator--06ef60c2-7a26-4c96-81fa-f280cfe0416d", "indicator--806a0057-c252-4c5c-90bb-f231a44c3c83", "indicator--5caa5467-27b6-4d73-8226-16ac27d6a2f3", "indicator--b4abdb75-9ad5-46bf-aec0-f74df480153b", "indicator--032cbbfd-e94b-4e32-bc6e-c124aaf8d144", "indicator--0ee4e85b-7e8a-4bcd-ba02-2039c6a8b248", "indicator--7a0bf4ea-f527-4b2e-bf8a-05f975444efc", "indicator--07088727-d898-4640-9beb-6f302be4d0e9", "indicator--a7b85fb5-2ea1-4ee7-94d2-9a26f7c12922", "indicator--771cbd4a-0265-4d8c-b730-f9a7befcd437", "indicator--f64b1b66-219d-4d13-a60a-fe717c255647", "indicator--8f51e134-3e6c-4607-9b8d-4b368547a393", "indicator--f4721663-e769-4337-bf2a-a7602de33138", "indicator--0aa16f4e-0fc2-4b9e-9cf6-bc55d95ce152", "indicator--67230275-1866-423a-98be-f9cd22b72d1a", "indicator--eb3eed98-815a-43a9-abd3-b29b56e0f3a8", "indicator--62719433-4952-47e7-aeea-96131e6f2dad", "indicator--7290b522-2b75-49e0-8c76-1b471da82c24", "indicator--55175b9f-2db1-4c6e-b47e-c1650946c30f", "indicator--8bd450ff-d369-40a4-8f64-5800f6cf0402", "indicator--251b9b48-584f-4d9a-846b-fb3d518d6c38", "indicator--203a9a92-96f7-496a-9f0b-08faed32e53c", "indicator--c1a79954-62de-4221-8895-b845459c25e7", "indicator--d3c55e48-b520-4238-a4e4-856e8aaf5a03", "indicator--63be681c-e3c3-4d5f-9404-52b1a2c82d3a", "indicator--d3c4f71d-6605-4d17-abb4-9fc4f5793100", "indicator--1a89577e-3c87-495b-b5df-186d6c0a81d0", "indicator--8076c582-d5d8-424c-a586-8be35abf512e", "indicator--df1a0051-eda5-4a10-9f7a-14acdfd438de", "indicator--09719072-8d6a-4567-a3bc-1205410072f1", "indicator--b5c0580e-1325-46da-bf1e-9ad4304fed12", "indicator--cee04d44-9c5c-4456-a8b9-21b205ced0d7", "indicator--dd4f760a-62b2-480b-a2c1-78a522025f1e", "indicator--b7f82131-775c-40c6-86bb-67367ec66928", "indicator--f5279207-9d52-4550-be4d-f5f2e1735647", "indicator--0f658523-a85f-4439-aba0-72620352d10f", "indicator--381ef34a-0cff-457c-a4a8-ec2f58dd41fa", "indicator--ecd84185-3f34-43d9-9c61-34a2117bf4e3", "indicator--7d23ce6f-83fc-4e1f-b9df-0d240002fa2f", "indicator--b6edd09b-2f44-44d0-8be9-d78010242200", "indicator--51216920-d7ea-4c3a-8446-57ac3051ef56", "indicator--5dc9b231-ef00-433d-ab72-2a196ea5ec14", "indicator--5ab3582b-0e99-4ce3-904a-33c649fab70c", "indicator--bd3da77b-8f4d-48e8-8c49-66b90b43563f", "indicator--de572c48-07cc-4c46-b1c7-8d5c529aaf71", "indicator--1c18ff4f-a7a5-40fd-8b49-bf35bb1da859", "indicator--1aa2e037-cd53-4ab9-a7e3-5341f1a3e6ab", "indicator--f78c412c-ea8c-49a3-ab7b-cf84348c3372", "indicator--b17a7fd4-29bb-4168-87f2-49b17109c2e5", "indicator--3a740c75-fd6b-4be5-8a16-469a34c0e741", "indicator--e9615661-da76-4e9c-8583-a004fa111e04", "indicator--f421a7e9-6aa5-4879-96e1-438f2d75a91a", "indicator--a4ed07e6-7d98-4da7-856a-e8738241fa22", "indicator--afdc53a6-980e-4ea1-afd2-504dbd73396a", "indicator--ff0f203b-8de9-40b4-912e-5fc25434c95a", "indicator--e04aea7c-58d6-48d3-bec0-732f6b5fb9a8", "indicator--be9c22ea-5d56-4474-b331-0edbc439ded0", "indicator--dca85eec-d1b5-4913-8990-ae42df6853fd", "indicator--731e502a-cfeb-46ca-884e-07b2a7c63ba2", "indicator--cf87ccb9-b745-45ec-96c0-03fda5201027", "indicator--e9621c42-3588-4f2d-bee5-70d55eba2e17", "indicator--01d34cd3-0690-47a7-8eda-44e534ce2c2f", "indicator--ecb65876-f9ef-44b9-a971-661dee6b2a0f", "indicator--5fad3b92-0201-4a46-93c9-1a495c5771dc", "indicator--3ab20842-b01e-4ae6-91bc-af43fc55c4a6", "indicator--6afc251e-b16b-46ea-87b8-4388878c8c22", "indicator--5272afe6-9b58-43c1-a92c-c6cee6020777", "indicator--3a9dafc9-2086-4ee8-bd8b-110513c46927", "indicator--68e1180e-a0be-484d-9b84-cc88d2322b58", "indicator--371df960-a12b-4faa-af8c-80029b6009c3", "indicator--805ef5ab-2bcc-4e64-b24d-56786d654ada", "indicator--9725668f-4ba7-4e3b-b139-651a68521845", "indicator--d406d6f2-a09c-4670-861e-853e3c49eecb", "indicator--d3c76584-b838-46cb-bc7c-a258b11f77f9", "indicator--fede765e-4827-413d-9d97-d015afdbb182", "indicator--60b3180d-2c04-4f0f-be6a-d64ba925a18a", "indicator--0bd5412d-3304-42c0-8f33-89a48c0030e8", "indicator--2e70279f-33a9-4ea7-b7ea-00235ad9537c", "indicator--0fb99bce-2b6c-4c95-b4ff-495e920bb7f7", "indicator--80ec1559-a4b2-4e4b-b222-d38ee6d50857", "indicator--7253ca02-13cc-4130-9e48-e2553824d827", "indicator--58b2c8f3-1656-46e5-9ba9-0740e5746f70", "indicator--ec4a7711-cd11-4f4c-8fd2-b50af491f760", "indicator--f427936c-de63-414d-8efb-9f0a69f7b236", "indicator--88ab8a95-022d-4a6c-a7a9-beac073be21b", "indicator--c6a04135-5174-4ca8-bdf3-7d80dea24ec9", "indicator--8e9d3d15-7f36-4ce3-a011-e8fdab157a6a", "indicator--1440a088-3594-4033-b16d-082dc8e1e99d", "indicator--9cf62181-6ebd-435a-91c6-b156207dbcc7", "indicator--f1d073a8-27b5-4ff8-a5d9-8e445c9c6c6b", "indicator--0c0fb965-5543-4049-a988-f23d2f56a48d", "indicator--7360fbaa-1263-4f07-8f76-901a960a9fcb", "indicator--0d22ee3b-0200-456b-9eba-1dabbe89c999", "indicator--ec3046d8-8098-48d5-9d7c-48051443a153", "indicator--6170a0c5-8915-44df-a2d8-dcb6119b3e60", "indicator--e8566064-9034-405b-adf3-0c0d179a33d5", "indicator--f992abca-bdea-46d8-b25d-4e629558b5c7", "indicator--2521111f-b1ba-4172-b7c5-271753073712", "indicator--d8976320-0201-435e-9fa6-acc07fe1de76", "indicator--613e0fec-3a0c-4330-9a5f-10c0d0f55eb3", "indicator--5bab73ec-c9d7-43f0-8df6-a6fc2c09a1f7", "indicator--0b6c05ac-9e5a-4b3b-a5f8-9dc5c2cd8bdc", "indicator--53c32e90-bd2f-484c-bee5-7c90c3c94262", "indicator--2ee3b802-e643-43bb-af96-cc5fe5faff23", "indicator--04d5a466-1ad3-4d48-b3cb-3a04dcc353a9", "indicator--8fd4ae09-e9d8-4bb8-b6f7-12929cd9e5d9", "indicator--d47da40e-f140-4a69-83d2-78ab8211ff33", "indicator--0a95e62c-4126-42bc-a94f-4ddfae0b18d3", "indicator--1d91f877-f19c-4d95-962e-a86c958828a5", "indicator--d0fe3faa-3a5c-4f5f-822a-af06f49a4cc6", "indicator--ec4ad1c5-a22e-4c83-85de-263685073016", "indicator--ed225f37-5ad7-4769-a7ff-3023c17474e8", "indicator--7042c5be-b6cd-437c-80dc-07ad5ed93d8a", "indicator--c0d66576-3722-4aa7-8d4f-2935ef791137", "indicator--57b74f37-f9e5-46c1-9f95-e2a605db769e", "indicator--bce6e7bc-f3d3-48ea-9303-904c17f445ef", "indicator--60fb0b51-2239-4965-b33a-f6387dec4e90", "indicator--42c17339-a7fa-41f7-b4f9-1e056eaea6da", "indicator--0221d500-a689-44a5-a132-056a8d9860fd", "indicator--943551a1-64a8-41b6-a04e-1556879d1287", "indicator--eb4af149-d870-4caa-b893-ea3ed1843fbf", "indicator--ac221dea-088c-4ee6-8563-7fff16f6f1e9", "indicator--3e37a363-1f41-45ff-8bda-e2d7a1f49229", "indicator--7573e8e2-4d2b-4c7c-aa88-9a936bd9b7cd", "indicator--ffc577e1-0c2d-440d-b429-4bf1ca49e7b6", "indicator--23ce8ce2-5d5b-4e32-9725-331e8beba5b6", "indicator--44321c25-f7cf-4c97-9439-d2865d385339", "indicator--a16995a0-8bbd-4529-8298-965b8bc2bced", "indicator--24cd5441-d30e-4b0b-aa0c-8377b59a09be", "indicator--0dc649c2-7568-46cf-b8b5-718bae091720", "indicator--07efb429-159c-4a1f-b276-976247befecb", "indicator--ee594681-f573-4e51-82a2-4779e4aa90cd", "indicator--10840ecb-f861-4f71-8e87-2efd1f1ce7f7", "indicator--3f007660-44a9-4d4d-87f3-f02982a310b1", "indicator--8669e821-2f04-4d72-b4ec-d980e27a69e1", "indicator--c585fd66-8c8c-483b-afcc-42bcee19a118", "indicator--8074b340-c062-4347-bf18-91f00a53a9e5", "indicator--665e2ce7-c2a1-4f38-b3b1-0e09e77eccf6", "indicator--c35fbdb5-caa9-4b2c-ad2d-f67db782c3e4", "indicator--40f50e16-8fff-44db-b519-57168ecf932b", "indicator--5fec85d2-c5f8-4912-af8e-787f0bfad98b", "indicator--fbc731dd-e9a1-431e-8aab-4dcf9db27244", "indicator--86dbcdc3-d4e3-4cef-8585-2d6e8a32c3be", "indicator--3a32da49-5f64-49ee-9905-cb11ed629725", "indicator--f84e167f-9559-4095-8cf2-e86940fcd4bb", "indicator--ff0db58d-063f-4796-99a9-371ec317228e", "indicator--22218312-b06d-47a6-8c22-ecc1a07094c0", "indicator--593df271-ded5-43c0-914d-fca7edf6ec38", "indicator--41509f93-98a0-42d6-9e7c-c7cddc021d12", "indicator--fa8e3d75-5b29-4d0a-be92-87ee423a7a82", "indicator--239ef06c-c3fd-4fa3-886c-ce2a2d4563e6", "indicator--6332327b-2562-49b8-a9d4-9669470de11f", "indicator--e399225b-ea26-407f-adef-d26aabaa648e", "indicator--5fb956f9-e205-4fdf-9fb0-93dd8b3ce5a8", "indicator--36681e9d-a4c2-4e87-8cd1-c966ee0dfb8b", "indicator--a26a8a87-f08f-403f-b551-7a4f6be01fa4", "indicator--b326f2f8-0241-4e3e-9b4b-0ebb28a3d5d2", "indicator--b208babf-71c9-4d3d-a7fe-cc0faf31fbc5", "indicator--93d50d2d-8ab1-4de3-ab62-1c766f1f3921", "indicator--0c2af0a2-4050-486e-9739-1b63212cca93", "indicator--4fb467db-75cd-4f9a-bd12-56d7fd9c5e2a", "indicator--f74c5f8c-4a30-4042-90c5-77923746a7f8", "indicator--5fb7d2ee-4c97-4508-8c55-cb54f3b7f262", "indicator--3c5f58e2-2572-4ab6-9f39-a7e9804663a9", "indicator--ac8a587a-ba59-42d5-8217-88d9c434403b", "indicator--c417e722-f908-44cd-9c7c-711591ddd9d1", "indicator--66851425-3a17-4f00-9c5d-40a6806c86bb", "indicator--f233ef6f-49c9-4ba5-932b-5197c9b9400f", "indicator--9d269a5f-1ca7-4d61-9ed1-011dd5f016b9", "indicator--f54bc1da-3312-4a26-a635-717ebd7a0604", "indicator--4bbcb4a4-fcda-4645-a18d-821f0f13b10b", "indicator--f04242e1-7785-4730-95b6-3423b99a5501", "indicator--a4aa1790-10b9-45ce-b86f-cdfdf2f9a5a1", "indicator--7116ec11-948e-4036-bfb9-19b96bd98917", "indicator--78383ec5-51c4-4a40-81e2-536421a7412d", "indicator--c1ec6c60-d528-4449-b14a-a1929c3e0fa6", "indicator--29e264d7-1750-4c81-88b5-0fa0d3933811", "indicator--e4d90583-d859-4d9e-908e-cbdfda124249", "indicator--52c231de-5640-4661-884a-558e7baca876", "indicator--96b3e165-af1c-4d4a-bf1f-5b7a979a16d1", "indicator--705ddc71-34b2-447e-a563-16c066970de8", "indicator--9bb74a20-f89a-47bc-adfb-044624f88fb0", "indicator--f6ae6b14-ffee-4525-9634-b478be562ce8", "indicator--29e78443-dd7d-4bc2-9e37-4332cb665ad1", "indicator--7c51adb5-ab3c-4abc-80c7-fc0b74f456b3", "indicator--b711773d-cd88-4448-82b2-d31fcd9d07c8", "indicator--e10f6d9b-7d00-42e0-9bf0-1c74592d834e", "indicator--e803a832-7935-4208-b243-344678e52e00", "indicator--6ee88a91-ac5d-4e94-ab1e-f3ac1dd522ff", "indicator--4abc486b-2325-4285-a578-ab299be488ab", "indicator--28bf3a29-5004-4355-a2a2-10c19e15952b", "indicator--1c5567cc-c2c1-4548-b87a-02505f1960bd", "indicator--e47485d1-331b-41aa-8f68-fe0456fa73d5", "indicator--6f6a56eb-2620-43fd-8a1c-a16a9f640968", "indicator--b038b809-fc92-4fe3-86f3-b3abaa71dd0c", "indicator--c5416378-709a-41b2-a623-057adf5f76e5", "indicator--b64e91ee-8cb9-4c04-a29a-e5f802185ea2", "indicator--7e1b48af-6af3-4a52-8a02-5e3663664a4e", "indicator--9db7143c-421d-4ae0-9742-6916f118a1f0", "indicator--9144d502-c678-445e-9838-4a7de7332ace", "indicator--4237d58e-d1ff-4995-bb36-7dd8f6a86967", "indicator--427432f6-f0e1-40a7-9bb2-abe44b6136c8", "indicator--043cae32-ae49-44cf-8737-7c62fc8a0cd8", "indicator--b6dcf390-2a84-48f6-85d5-d7dd2f7144fd", "indicator--c566d64b-4e7f-4bef-b1a8-248ae14de081", "indicator--330759af-d008-41c1-b055-cae29b608008", "indicator--125d1989-f9d0-4721-8f76-21b0fb8c6633", "indicator--55f08218-a89f-462a-9e8f-5bc2d4c443e6", "indicator--c413ea72-5104-481f-b7bf-590de5ef8df7", "indicator--b5b94e71-c495-49e4-a648-5de372f9ca9d", "indicator--531070e8-c251-4674-a35a-63d04840a2ea", "indicator--40524cc0-dbb0-46c8-821d-63b3bbd53850", "indicator--5f86d0be-2d29-4c92-b7a6-6deddf85cd37", "indicator--21477f7f-a094-46b7-b4d3-0aa8d3904f80", "indicator--b3af5773-46ec-4adc-bb34-95fb07e2662a", "indicator--d6c0ffb6-5d0b-44d6-9623-5d5235d95d92", "indicator--630893fa-9c43-4312-9b21-39fd59646316", "indicator--d8cb9bbb-f7c8-40a9-9de2-484149849703", "indicator--c6a2b12b-b5d6-45c6-9a2b-b4509f8e4c6d", "indicator--a0660e77-93e1-47d3-8c99-05a408ac3cde", "indicator--987fcd9f-e05a-41d1-b77d-c44916f4a62b", "indicator--8e70dd14-ac5c-4718-8f00-16a388298ba4", "indicator--ea9b149b-52f2-4c8a-ab80-b351548f5695", "indicator--6f370349-d887-458e-8503-c97ce5fa878d", "indicator--d600970d-1569-43de-8f97-da47b4d2744e", "indicator--73141a30-9dbd-4d68-b3b7-530131b4710f", "indicator--76515402-d676-4390-8f20-b7e453ea8f82", "indicator--56a91d39-8524-429c-aac8-f2959860c8bf", "indicator--c3137624-3963-48f0-b496-39563e150965", "indicator--f535feef-717a-41db-9761-39f27db767bc", "indicator--983d159d-56ac-4e7a-8f96-be7f1314e56f", "indicator--407a4272-d96a-433b-b183-1869e0a353bf", "indicator--ab4ab68c-da27-499d-87e9-8b4b975ef7d1", "indicator--bf3fba77-13d5-444b-8cd0-048afc48a106", "indicator--9253eb12-6917-465b-9fea-c5d8884536e0", "indicator--227e73fd-23fa-400c-99c5-f1fd33e34a42", "indicator--9349e6b9-f2fe-43cb-98d5-1d7a16ec7004", "indicator--afee4be6-b7ad-4456-b956-d575a4b302e1", "indicator--7bf8f9df-48f6-484b-baa9-aa0a1e0aa9bb", "indicator--1ef39a1b-9dbb-4e3c-be5d-eccce0c9d784", "indicator--04279856-949d-42ea-b69f-b065826f8398", "indicator--2523a920-817f-4e6a-98b8-06f37cb52856", "indicator--d6a8c1a1-84e6-489f-9603-8d92d82c66ac", "indicator--de4c5e59-0b59-40f7-98aa-6c4cc49c0560", "indicator--3002b121-9946-4b96-a584-04e428cbab85", "indicator--283921ff-7e76-4c69-a8e1-ab6f0589229f", "indicator--d6dbc76c-6d8f-4258-b378-cc18c865b641", "indicator--824f5d24-fe8e-4b1c-b0bd-a735e22c3bc6", "indicator--db861fa6-a7d7-4e28-8bee-a4bc4102a0d7", "indicator--93ce0c78-e313-4f88-88da-f7dfb7bf31ca", "indicator--c92899c7-3a31-4fb3-af3f-03179f6790c3", "indicator--c1d67968-14a9-4b34-a0ca-f09c6f365333", "indicator--8cf8fe16-d865-4651-bf75-6c3ca9416b27", "indicator--1304413c-d275-4c7e-ac31-7ef701c0aca0", "indicator--8481f543-d342-4d4c-9091-8a67e0a10e69", "indicator--7374df2f-6d23-4d15-9f20-5f6e6cfcdb7a", "indicator--19d667d0-abcc-4622-bd68-d179a33dd0d0", "indicator--37d70599-1648-4c0e-94c6-e4f11bdd5ffb", "indicator--ca02bf60-ac98-4f76-b3ec-91f946fa4be0", "indicator--a78c6573-595c-4272-bfc1-3d382c2c78d8", "indicator--63be3ccc-ddc1-47fc-9930-17a3f671085e", "indicator--8291e54a-f7a0-43d7-9771-6f1c6b9cc7c6", "indicator--1fcb764f-131e-40bb-a93e-8bb31a2c6e3d", "indicator--a5126a1c-b4e4-4381-af8e-c1d9db83e407", "indicator--55b9c291-64a9-4759-8253-93890c239d51", "indicator--53613fdb-a78f-4922-bc0d-4e1617ffa57c", "indicator--bbae649c-0a6b-4f94-9507-4d859a36e011", "indicator--3de14e92-69d3-4196-9b6f-4a699b2ad3fd", "indicator--6784bf2a-69be-46f3-a9ef-142c6ec9dce5", "indicator--62a7348d-9f90-4b09-9aa0-0f089084732d", "indicator--5b1875b5-34ac-4aa2-8149-4c8d975f018a", "indicator--5d5ea6f8-a497-4640-8a70-e15c12e97199", "indicator--518e7c37-53d4-4475-9edf-81408985fbc0", "indicator--cb16f90b-e46d-46d5-9abf-c8bbed20df44", "indicator--c5c91b3a-eaf7-4503-b975-eee09ae1b4a7", "indicator--3c2c56d0-591a-4c8a-ad97-71788151733f", "indicator--7ac74a6b-3a1a-41b4-a0bc-a50d5cf30c9a", "indicator--d808e745-d7ea-4b4b-84ec-b67c668822b9", "indicator--80609aa8-86dc-46ff-b093-607c823e7778", "indicator--7294c77e-4e3f-4840-8da9-5ddbc7e9ef5d", "indicator--b9ff29cb-a01d-4b83-a468-a751522074ee", "indicator--6d854d27-868d-4214-b566-dc7db4e91211", "indicator--4e61daf4-fbce-4d3d-bf6b-517abb77be05", "indicator--174a359c-e79e-4f19-9dd9-46e7de755308", "indicator--27318a13-895e-4b88-8cee-d2ddac8a8216", "indicator--9ba19091-0c71-48fb-80ed-cec4e700d8e9", "indicator--75acd96f-0573-47ae-93b4-69118a3e6937", "indicator--821f906d-5511-43b6-aa51-6678bc087ccd", "indicator--07e18904-e533-4188-b62f-e1ae122b8aba", "indicator--dcf256f6-1f4d-406f-9fe3-a704229588c0", "indicator--b034363f-01f1-424b-93a1-ab210956956d", "indicator--f8fbe1fc-5e28-477a-8733-8d8c5f010dc0", "indicator--ff791626-5a83-497d-8538-3f67a87b3687", "indicator--b24f06b6-842b-483f-8c3a-cca6f03790f5", "indicator--1b99b4c3-158c-4724-8590-c672edd69525", "indicator--c4b6384e-408f-4de2-bb8c-9f4307daf627", "indicator--ff8c9bab-5a9d-4eec-bb93-6ff9a0d78425", "indicator--1ac5990e-4d88-4185-b168-2fab56591c5c", "indicator--e211e173-c1cf-4642-9850-b87b2f78cb4e", "indicator--52e4a60f-6f44-4504-812a-521ad3dd77fa", "indicator--309c90cc-48ba-4d14-865a-3d60f976b870", "indicator--620787a7-995f-4770-bd95-2797a7c587ef", "indicator--b21d4183-4cd5-428e-94a6-0fcf28574702", "indicator--5408423d-cf5c-4462-9722-8f99bf16b442", "indicator--9a9e827d-606e-4294-b551-13eda2ac49dc", "indicator--85cf9c36-1d8d-4341-adb9-0b8374136c2e", "indicator--333b0d01-693a-4cb6-8a8d-8b45ac15f8e8", "indicator--be60c5e5-6f6b-4d43-9796-f303f5f64a24", "indicator--22f9a911-3b9d-49a8-9efe-9195cc34cd2b", "indicator--78e055d8-0c10-4813-835f-3040e07d8672", "indicator--d33baf58-0679-42dd-bdbe-232ef342cc28", "indicator--61699682-7c51-4681-b1c7-75703b3698b4", "indicator--207ea2c6-5c12-4dbb-8e7b-badc6c30b67f", "indicator--3f77b377-2613-465d-aa77-4551f6acadc8", "indicator--6234fbd3-1225-42be-bf9c-d0e2d72705ab", "indicator--d9205a2e-62b7-4d1e-928c-95649f0e8980", "indicator--d84f0cf1-5de9-4306-9160-5660e420515d", "indicator--b93d9111-deea-453e-b8dd-3eba67703f85", "sighting--cfc0eeb5-2944-4d3a-ac51-6781ae2a2c28", "sighting--cbea0132-2d65-4841-bdd8-dda3f0aa78fa", "sighting--a2983f15-66df-4945-b37f-8ceec7a4e17b", "sighting--34f8d814-a3a6-4379-84ea-e4aaad8a8753", "sighting--5fac8fb3-3dec-40cd-b04a-d0f3757e276e", "sighting--eb93433f-b97a-4c59-bca8-bb6cd4e13f08", "sighting--42242db3-f01b-43eb-b58f-8fae13ab993a", "sighting--4c4ea24a-9eeb-4fa2-993f-504a9a8fbe35", "sighting--8746e7eb-93df-42d1-b0df-491779ea19e9", "sighting--937b5bb3-ded2-4272-bce0-e1af3b96edd9", "sighting--628488f1-0023-4d07-94e7-368751ed4890", "sighting--900aebde-40ad-45f5-8366-8d078db437e2", "sighting--b72f8a74-1f4c-41e8-9c32-bff04d4e4019", "sighting--3019b1b6-27b8-4bb5-843e-6a9818df216c", "sighting--88a94050-4190-4d0c-a714-ec1a9d0cd997", "sighting--8ca77f9f-2223-4ab7-b89e-9f8d1f2bcbc5", "sighting--2233b277-0017-4176-bed9-dd38417231ac", "sighting--241785c9-3091-427c-854d-2e07a3ca9ea0", "sighting--b5412aaf-0194-4516-962d-034ab9db9429", "sighting--ea102748-400b-4af0-a7f0-bb63ef092611", "sighting--6f3b9772-882b-4e52-ba3a-5b56a2af4af8", "sighting--eddc01a1-e3a3-4b27-97a6-44acb179c659", "sighting--00c64f0a-4a71-4b46-af18-ff0b701379ef", "sighting--607b8427-b283-42ac-bb9c-48c0dc94852c", "sighting--f3365cdf-c4f8-4b7d-ba61-bee9a9da208e", "sighting--1ef6857a-6487-40f3-8d87-1208b0d2e3c1", "sighting--96cfa85e-962a-4104-8319-8f1aacfebd9b", "sighting--fbb00c1d-d0e8-4b09-98de-6f2d735aae35", "sighting--26e83d2e-62cf-4437-b1bc-6196078c34da", "sighting--2bf7e53c-e8e4-4469-b417-ab04455a691e", "sighting--a0b81d7c-0a16-4d67-b383-41646e0e4833", "sighting--e787b2d6-03ef-41ab-abee-3122f07fcb98", "sighting--ce244d0a-c736-4556-bcf4-ef9b8342933c", "sighting--f792b1d6-2558-474b-bcad-1ce32c909645", "sighting--e04fd785-2d82-4ae4-aabf-91ceb59d78f9", "sighting--80cb303c-a110-446d-b6f3-1b7af9731155", "sighting--0c67c7eb-b1cc-4af4-8f8a-e16b1a4cab2e", "sighting--146d8112-a8ac-4002-b448-2bdf250e7b32", "sighting--63e82568-8d9e-4d75-b262-7345f3f899fe", "sighting--4c55728f-9422-40b3-839a-2c36bf93366b", "sighting--7fca2e49-1005-4a74-8b1e-2c1f623c4357", "sighting--efe240ce-fb7c-4fec-a6b0-d92d8407363c", "sighting--bcc0973e-eeae-4e9f-a2c6-91affe3e057f", "sighting--9eda548d-55a4-47d1-a6de-56904f68a5d5", "sighting--5d30ca4a-11bc-4da9-8e6d-42fdf63273e9", "sighting--1c52f9e9-858c-42a9-8fce-871db701e043", "sighting--0252dc3c-4f28-4580-9960-7d04b00a3baf", "sighting--4f00938a-1a80-4779-a2d3-50b539e262da", "sighting--9f15f6f0-0f97-4188-97a5-5dfd3ac3cc16", "sighting--ac636f1b-ae0b-4fe3-bbe6-3987f4ce6e5d", "sighting--a69de0fd-98c2-404e-84f3-3a0f9846b07a", "sighting--872d356b-2c19-4c04-8579-dbce79285ef3", "sighting--b63b2e3d-c609-4f57-8e74-29d60a1e2901", "sighting--ea5dd1a9-df61-4050-96a7-cff6979f5a7a", "sighting--43cba841-6de1-401b-a2c2-5b97d5b4ce07", "sighting--c9b829ba-5193-4b13-94fe-d825ed308964", "sighting--a0054ba4-28f6-4a3c-a9d4-2b534dc34a78", "sighting--e8dd6b18-ff5a-4ef0-ad83-b6153fb0b7c1", "sighting--7ffe2b70-04e4-44a1-834e-29d2d2879ac1", "sighting--0283b2d0-9e00-4ce0-a772-a2f363bc82b6", "sighting--9a762f1d-267b-465a-b38b-6075f7773aed", "sighting--fb1e3fe5-bf93-40d3-98b3-953b7240f247", "sighting--74a3a952-c18c-4cf9-a03e-efba7cd30b1f", "sighting--f7b7271f-22c2-4afd-8714-4d0d362cf52c", "sighting--995581f0-4a81-4d75-b2e0-fed921e03f79", "sighting--db30083f-d84c-4def-b249-0357ff71b9f4", "sighting--c1b1a781-9e78-4c5e-b461-77698a18cdc7", "sighting--9e1dadef-41ce-428a-ba12-965c001636ee", "sighting--03fa4084-f539-4d74-ba3d-17cb2e561635", "sighting--314fe074-667e-4dc2-bb20-f3baa3911859", "sighting--9b49a872-b59a-496e-a2bd-5e7f14911e8d", "sighting--a987809f-b9fd-46e2-97a8-087a06d15d3d", "sighting--46c79874-ac3a-4f58-a763-d00c0ce4838f", "sighting--a4ba143f-35ad-4d89-9ebc-5ff671257979", "sighting--a837b7c5-e44b-48fa-9036-6ee7f6072e75", "sighting--832c37f1-3ddb-439f-8f00-d672f9bc9750", "sighting--3b222a1c-224d-41a8-af57-44939efba88f", "sighting--9ed42907-c2e7-41ba-9acc-b1de1d9b0526", "sighting--bdf6ede2-c859-4e1a-ac12-228f7a2d003f", "sighting--e49e2733-d5b4-4bc7-a724-76256d6f03be", "sighting--34035073-762c-443f-be93-111189720231", "sighting--0366c41b-26b1-49fe-9098-fca17f4e6e62", "sighting--b00af6a3-4e74-4872-b152-f139eee3dc8f", "sighting--b84d54bb-14b9-4f67-bd0d-099e90654b80", "sighting--95630ed7-88c1-4524-99d9-1e57b43f527a", "sighting--c41f6636-e090-4c90-8c2e-ad890d19bbc6", "sighting--16354b92-90c0-4b1e-943e-e81b0272b8cb", "sighting--ec2228d3-fb58-425b-94e2-92a9856c6b3f", "sighting--7119d77c-808d-479e-bf76-ebbb5d848dc3", "sighting--6d81cb33-f027-4d0b-a82d-e34644a56556", "sighting--50750514-1edd-4d0c-a6ec-0fc961c14b0d", "sighting--edb08094-8f91-4362-b93d-6ae127ddbc53", "sighting--a3db42cc-5d3a-4c1c-a014-c17b1165c70a", "sighting--cf1d1c0b-89a6-4397-91b6-a6ae4c76ebef", "sighting--8d35ea8c-386f-4ac4-8286-9ce24ae6dff1", "sighting--68c9c7cf-ab9c-4775-9033-2d7b6ffab8af", "sighting--9b3367ff-a5b3-43a1-ba39-9672232ae537", "sighting--b40a7453-cbfd-4d92-b28d-8bcaee69f1e5", "sighting--28c0d383-fca4-484e-988a-1f068175392e", "sighting--11f8b90f-078b-4b6c-beff-e9be02a1203d", "sighting--5e919267-8b0c-47f1-a349-004a41cd4134", "sighting--107a0d77-67cc-422e-9859-1d8a6b01b0fc", "sighting--b40a0aca-c701-4618-8be2-4219504bfb6b", "sighting--ca1c7c1c-8644-4802-8ca7-f0d38e170b36", "sighting--cacc0ad8-fbf4-4be7-b1ac-01911265e3a8", "sighting--081e1788-7e5b-4550-b3a5-d362a8987047", "sighting--e472f9ed-eb69-4881-804a-b1b61893a699", "sighting--0d418009-e7bd-4403-a06b-c83521638927", "sighting--71a03583-8c46-44de-9b88-5760f1e54bfa", "sighting--c03eabc9-eea0-4c35-8e94-f6968d659f97", "sighting--7f1bf8f4-e301-41e2-82a8-3882871be97b", "sighting--29ea426a-512d-4ec0-9aab-3dec413c1ea4", "sighting--a2a45b8e-1f8f-4024-b461-506be30e6325", "sighting--a22f6fd3-f742-47a6-9c3f-b73eb5c29c7c", "sighting--990a375f-0905-4816-a24f-bb7b09797715", "sighting--7d6d7c10-6381-4c8d-bbf9-228c9a938689", "sighting--ba25a50f-ca70-428d-b8d0-26549ad7e61b", "sighting--2e54b48c-325e-4e2f-b680-331b73108cc6", "sighting--0cf05d28-9074-4b90-b9f8-a19ac168bee6", "sighting--11775e74-21b2-4a51-a384-912e8f0c112f", "sighting--3c6b0bee-97dd-426c-ab01-e86229732486", "sighting--6d64781d-2500-4a05-9502-55ab9195cb99", "sighting--48c0138c-87bf-4cbd-87e8-17f9f13ed62a", "sighting--174abdf3-ae1a-4ef9-9109-be751d49b93f", "sighting--b8762080-eebe-4a5d-8963-a0f812ccdf26", "sighting--c6042672-0e28-497a-adb5-14b87682ee7e", "sighting--aec8812e-dd21-4b49-a34b-ea3a7a3f216e", "sighting--dbab2413-c3f7-4400-bfa7-a682b4306e72", "sighting--ab617798-21cd-4908-a046-84ef845d65f0", "sighting--ed34fc69-dac2-4286-b781-5afe9c973a20", "sighting--79c9511e-3f5d-470b-9368-3ba97f9c6cec", "sighting--e4df24e4-738e-49bd-a830-f88b53b8ff06", "sighting--4d5f2a0d-8a65-4f97-a5d7-5f827f78981a", "sighting--addd2b0f-4ada-4d4d-b90f-8629cd6b071d", "sighting--839aa027-be39-4288-9d67-90536be2237d", "sighting--0998d61e-4726-4ca1-bf5c-14d6af485d24", "sighting--543bd3be-e802-40b8-9c74-18643634ace4", "sighting--0c2caa37-a46b-4f78-a965-2fb598686c26", "sighting--6e2fd7c5-ee8b-41ef-9baa-463817850113", "sighting--4abf9e46-e8d8-4533-846d-1588f5621f2c", "sighting--02ed88af-8a47-4f78-9fa8-eb2c5ed2a414", "sighting--b7ae670b-8704-43c0-9281-4467cf4140ff", "sighting--39124af6-6d26-47e7-b3e5-fa452f519f9e", "sighting--f77db5ab-80b5-4177-8392-b9a3ce9c9522", "sighting--a320d3c5-3b4e-4c0f-80e8-4a09124f38e9", "sighting--99486c73-2549-4e03-b9b8-af66b86aedff", "sighting--8b6efc10-8485-42e3-844d-db230ad288df", "sighting--2e64c58f-b850-43fb-a934-03c79ab194f4", "sighting--bbff3c73-7b37-4804-9e80-f093a100ac0b", "sighting--9a78c2f4-20d4-4a2b-92cc-3b20922c06b9", "sighting--02b5af73-1d3e-4b42-8579-ed27ad263050", "sighting--c25e52e6-fcaf-4c35-a801-6cd06bf5a6dd", "sighting--0fcafdd9-d5a3-4c99-b921-45a9934de437", "sighting--480dd64a-3786-4da2-93bc-b110f07f636e", "sighting--6abe8394-20a1-45f9-b74f-68a18be39661", "sighting--abcbdc72-2d86-4d42-b28e-7817f3e82fa6", "sighting--8c718aca-5081-4261-a7c0-1c573f0d4933", "sighting--8b90cd8d-2021-473f-b796-576d7dfa5db8", "sighting--c305cf4e-678a-4f8c-bf34-8d1cd0b9094b", "sighting--dac6f478-4d70-4022-b4d7-1e05055c34c9", "sighting--a03fbb73-b67e-4ae8-9ead-c7ca0e6f76dd", "sighting--477703c2-dbc3-4da6-a705-38a53992d973", "sighting--5af43629-ebd5-44ad-a0e3-7ad8eb7cb1d5", "sighting--ec57d24b-b6c2-41d7-b7f0-7f6e3d3004dd", "sighting--047108a7-c4c4-404b-93e5-c0356098b6c3", "sighting--abd37b58-bcb6-405c-9315-bdede86c4d8c", "sighting--5a9e4422-0a99-479f-a4a1-9ea379de9172", "sighting--83fb9ec8-8f72-4c38-8c67-7433a672f539", "sighting--d27f960a-ddf2-4f1a-aeea-e496ea3953ed", "sighting--26d7da86-dc37-4e7c-9365-7e71b4096d0c", "sighting--cacc437f-277a-4468-b78e-ef0136934a78", "sighting--799612d1-4a6e-4fb6-90cf-c1ef8c67e3fc", "sighting--6b63a4ef-d49a-4273-87b5-b63c618a0d94", "sighting--419c562b-a494-47f2-95c9-2091e6af3351", "sighting--54faec85-c13c-42f5-a933-e3223b1aa7d6", "sighting--c507acd7-e34a-4e09-b2f8-ca63315dc702", "sighting--e9259404-8f3b-46f6-b1df-820e7e70f750", "sighting--5c673038-4ae1-4268-9b14-63f455d9a2c6", "sighting--26df2ad9-259a-4e5c-ad3a-e27454a3a490", "sighting--3cd6d3b8-e729-4c50-8b35-8aad6ba433ac", "sighting--108c6c22-354a-4651-877b-796e680170b3", "sighting--1f659007-ecaa-4e27-be75-24835ad80506", "sighting--72944ab6-3387-4f64-8ca4-d8a9529d6240", "sighting--2dcc5614-43ac-4873-897e-dd034246ab90", "sighting--3e940724-5c98-434e-bfff-fc460c4482aa", "sighting--aea106ed-f50c-4bab-9562-d8c1bd0e6955", "sighting--893d76ff-6cce-4b3f-a00b-cfa797166c8c", "sighting--5caa6637-bff2-4e6a-a3e1-ee3a1237e2cf", "sighting--a07d50ad-437e-4cc3-93ca-812e623107d2", "sighting--bc788a1b-27eb-4068-b1d6-d9240595a73b", "sighting--f58f9cd5-66dc-4a66-a72a-24e3bfc9b0a3", "sighting--7b5a9498-4bbe-45f2-bc16-a1bf0049b7c7", "sighting--4b2867b2-95a4-4e57-95e0-f2aeb6717436", "sighting--b4c6040b-4b75-4a1c-9aef-eef415b3e38d", "sighting--6db493aa-5137-4795-b21d-5b68fa08a108", "sighting--e9821606-2dcc-4006-9b53-0da6dd7b72e4", "sighting--7d338401-6edb-408b-9bbf-1489362951e2", "sighting--5287d424-d1b4-4dc4-9d85-5db95c21d9ed", "sighting--f47a72e4-fd53-4bdb-be0a-8df0ca051fbb", "sighting--944114d4-6f94-4853-8d44-0893f099aeea", "sighting--d6e41094-bf2c-4a05-aa36-ada2243e907e", "sighting--0c5255f6-33e6-4426-8f99-ee4d79fe2445", "sighting--3a40cda4-db05-4ecf-9ded-3be23740cf0b", "sighting--d6906b54-cd15-48d5-9c2e-f0c1bebe4137", "sighting--24b2e8fb-5a46-4546-8af1-0138eb4b2f53", "sighting--7ec9e9dd-ae48-4726-ac85-3fa1e8b37305", "sighting--372830d5-b531-4be9-80ee-0c63878023aa", "sighting--a045a21e-e4a8-4c67-a501-fb49fbee41d6", "sighting--450ec600-522d-46ab-80b1-5c92deeda183", "sighting--18916234-fd36-4d00-b0e7-880c5e075525", "sighting--06a185b2-2778-441e-a3b9-eb6c6cc24bf5", "sighting--02c2637f-0903-46e0-b2c2-905a846df6f8", "sighting--1f083844-2e27-4cc8-b46a-d29d5b434536", "sighting--27ecf3a5-6329-4956-8cb8-db230465e307", "sighting--75e8c03b-dee4-4eec-bc58-0dda5ce64e4b", "sighting--b596a883-b404-48e5-8774-7bd382d02ddc", "sighting--9bb1d338-af72-41ea-a802-7550a94b5a44", "sighting--d61d8f25-8c08-44c6-8cff-6eda02e45a45", "sighting--2a61b7b7-4b1b-4713-a860-2c6fcd1f5324", "sighting--f76a8966-dd48-41f9-bb10-3149a642c087", "sighting--f7da4ab1-f393-4509-b3d0-130ad8178eb5", "sighting--6f893e96-3d8b-4fcb-bce1-7b9818f08bbe", "sighting--8c49a996-c397-458d-a886-816028895b0b", "sighting--cf6f0f82-3a4b-4e0b-a4f7-b591212f4468", "sighting--d4f1b646-8f1b-4913-9f31-cdf4f23521eb", "sighting--d4613ab7-942d-4738-9b8d-9824ab9b65d3", "sighting--946d7b0c-0b81-436e-88b4-31b60fc92d34", "sighting--8c057902-c36b-4fe7-9a1e-a7a9c55f9795", "sighting--f87a2053-0c17-4d0c-9b92-d539b8b68aa5", "sighting--c50e6cac-762e-42d0-a336-05e529fcf49d", "sighting--04cdaff9-7682-4b1c-85e0-796791c0bd08", "sighting--acf70eaa-4e5a-4701-9b32-b1a9c1d60fa1", "sighting--5e41ba49-42dc-4ac9-8276-16993fa28781", "sighting--3dc18164-8502-4fde-ba28-37bd13f30820", "sighting--a963ad57-7a91-4c27-9940-cccb03881f6e", "sighting--d9d08d26-b016-4837-ace1-e21641aa5f35", "sighting--94b81b3a-7611-44ce-95cc-f788ad5c68f7", "sighting--3cdce926-c6f4-45fc-80cf-ef2e63e352cc", "sighting--ea6c4df1-6bcb-4390-b00a-b40836e5613f", "sighting--346198f5-f3f0-40ec-ab8d-b3d680f4a241", "sighting--abb5496e-9b40-4f03-acd0-b93283ea426c", "sighting--0bbc862e-fa66-4d66-9aea-c74b4ffc18e5", "sighting--f4bb581d-a2b8-48d7-81f6-0d9478406610", "sighting--a08cb9e8-8c46-4018-beb5-63f87cd77942", "sighting--324afc35-9b6d-43d8-ad17-8593197167f2", "sighting--63ca00ee-4e0f-4013-ad45-183d011b5640", "sighting--2bf3e13a-0d30-41d9-b4c3-67df637d11e6", "sighting--1535c216-ab61-4848-81df-c4f597928bd9", "sighting--c03fa24e-d5e5-464a-9cfa-ac75d756b363", "sighting--d41aa1bc-dd76-4b96-842b-f5afde601a7f", "sighting--395aa801-cb0c-4418-8724-91fc87921893", "sighting--bfbf1a15-83a8-436b-bf86-fa22d829d32c", "sighting--84034935-603e-490f-a060-4a5e393d5ca9", "sighting--f0d0be18-3a2c-44d2-ad9e-5cdb35323f65", "sighting--33fbee27-b2d4-4e1f-bfbe-3f163b6a4792", "sighting--ba8340ee-01f8-41d0-8533-c3f7b6e487a7", "sighting--cc9b5ada-bd0d-45e9-9326-c05fd21a19a9", "sighting--af8b6457-4a9a-4e1c-ae66-df0e1d2b04cd", "sighting--94854acf-f01a-408b-8900-d6b94d8138c6", "sighting--e97fb8ff-9779-4e10-b98b-d6e76ae8f6a8", "sighting--cf326f1e-8997-4712-bc39-1e4ca5ad64ba", "sighting--a3661dd2-ef30-427f-88fa-72857d27cfee", "sighting--28041e94-a46b-4472-98a5-8af2a175dfce", "sighting--46af041d-889c-4fff-bdb9-a43323dff479", "sighting--37d9f35f-72a4-494d-bc22-f93e20c7ec03", "sighting--4d09dfd8-8cec-43d7-95fe-4250ba1b6ddb", "sighting--a8327b19-eba5-46b9-969e-2296df86b527", "sighting--3a04239c-f919-4da5-bb6e-8e52ca22b20a", "sighting--2b7c6d7d-1e96-4f34-bce0-e30fd0d04905", "sighting--4c2b0dad-c231-45c3-a5c1-1ac53ec13de6", "sighting--65fb9ea9-644c-4268-a75c-2d1a5c16add1", "sighting--309e363b-5bfb-4f75-ada6-28bb0b7b1102", "sighting--e76d9f95-43a2-4173-9a4d-b0bba113be50", "sighting--70839521-2e83-4d51-8667-27e57e045321", "sighting--4198f8db-1f5f-483b-b13a-cd0ddcbd7a37", "sighting--a2a4929a-608a-4f8c-a430-4193cd504c03", "sighting--818ff893-57cc-4dcd-af39-e5a3e7371680", "sighting--69085154-cdfb-4d1e-9b5a-f7f307fcd8a9", "sighting--cefe61f5-2eec-4e36-860a-2a7a0d6d5239", "sighting--b214c4be-f864-40d5-b9a3-858ffb15d3ba", "sighting--4d559cd8-5272-4dc8-a2b1-5f75143a2d16", "sighting--80e1e506-6feb-420f-af5d-c1f2c741a275", "sighting--7ac4eac5-b9be-4361-9c71-8aa9243dd79f", "sighting--786afe17-b0f4-4583-abb6-bea51d87dad3", "sighting--b8e3a7c4-6a3f-44db-9a5f-305dacfef80a", "sighting--169b38e4-a167-425f-8b0f-4f4c345a7dd0", "sighting--79292d8b-e31a-4581-9a67-c80130c10121", "sighting--eed26078-d54c-4163-b580-4cce92ecc8d4", "sighting--a1b89276-198f-4fd4-bc64-66846a331d8d", "sighting--321e4c98-efe1-4699-b7b0-19defb0cba1c", "sighting--4815cfb7-7a43-46bf-844c-5057b7d0ad84", "sighting--d3b1a0c7-8e42-4a27-9aca-1d2bfb0b8fdc", "sighting--73bff0b7-6dc5-45ce-8f01-b0aa51ee9e10", "sighting--b75469f7-960c-4444-bcf9-e42771b4dbe0", "sighting--e7824383-3f2c-4dc3-86ce-a0f7d8e54c5a", "sighting--222ffc8f-7853-4414-b70f-bbdd2b157fb4", "sighting--49526063-168c-4dd4-ab5e-689b7891f794", "sighting--e78fa608-21ee-4e16-9ddc-5250cdaf5b97", "sighting--79c9fe44-de11-48ba-b5ef-44f69132afef", "sighting--667e19a0-73d2-4b2d-8a1f-dceb28ed7913", "sighting--6d4ba694-71bb-4680-b975-f0725bcc3eb3", "sighting--8ac1648f-24bb-45ad-b169-f56a8d995fd3", "sighting--9147c8bf-9f07-44a5-9b35-22981c583b98", "sighting--7539aec4-3d0a-4007-bb92-62ef79621d18", "sighting--24b00a86-7ff3-4133-9fcf-0df66ef1acb2", "sighting--760e423e-c8d0-46e2-8548-9ce6e2eca8e5", "sighting--4999757c-72f4-4fea-9266-34c5c96c6e12", "sighting--5373a36e-4ccb-4cef-8967-3b881ca4047c", "sighting--11f09f5e-d44e-4d5d-8537-15a29b4f80ef", "sighting--00af4ec2-5fb8-4ee8-99cf-5014cd4a367f", "sighting--674e5016-ce26-472b-bbbb-66416377c009", "sighting--3071d986-babf-4fcd-8b5f-619f16713edb", "sighting--0edbc700-e30e-4312-9515-95010af4c94a", "sighting--6e31d00c-e7ab-4fd9-9858-53281b7450c8", "sighting--cc7c1533-c154-43c5-bf05-e903b305d35f", "sighting--790d3291-6172-45db-b183-ca0ea6da9ce2", "sighting--a3366ccf-8e64-47ba-a9d8-e7f9ae3d465f", "sighting--6f58d417-7e8d-494d-b342-e700a0386792", "sighting--233a32bf-731f-409e-a65a-546fa69c788e", "sighting--1285a364-af15-457d-9bad-56a6971f9782", "sighting--d514e142-c83e-4c66-a67a-cc7b8eee097e", "sighting--b343d1b5-e97c-4815-8fd1-dd7fcbaf2252", "sighting--3f49f146-a10e-4446-8eab-8c9fe113400a", "sighting--34a1631e-b987-4f40-9609-e074d5ca1f45", "sighting--56ddc565-c36a-4506-9321-8ddf8a03b34c", "sighting--69ae10e6-9222-451b-b971-d76773719687", "sighting--f5c3f8ad-bfe9-4708-9561-cf874d33e853", "sighting--cc69372e-772d-4bf4-952e-dd79e9b1a0d5", "sighting--09574c95-49fe-4f0e-ba4d-6fd7d51b05bd", "sighting--dcc34c9e-4d26-4c21-8d93-25848cd8679b", "sighting--30e7ad6e-768d-4561-aa2b-dca9fa65b5dc", "sighting--c13f5584-74df-44a5-a3a2-317b864964a6", "sighting--b49bd6c2-5f7c-499a-b712-3125501d89ce", "sighting--ebca0d9a-3340-4461-b172-a1bf0b7babaf", "sighting--678b66d3-cb71-4891-8d4d-d4dc6cd2c88f", "sighting--c99f05f8-0319-45cc-9473-be7dfda9b5b3", "sighting--e047721b-76dd-4839-a011-c84cd7468740", "sighting--2c8fe992-f48f-432b-a296-97e78423a9c1", "sighting--b2dc9971-43e1-4ebd-9e97-a10dc2d72355", "sighting--3067631a-055a-48f7-a5b4-5dfdf3f4f903", "sighting--8bb0f24e-2bb7-44bd-84f7-87a271894f31", "sighting--2daee110-4ff7-4db3-982a-556736833003", "sighting--c747f790-078a-4c33-8c7a-a9935b686028", "sighting--3f25aaa8-fd7d-4e1d-985f-1fd162fa29d6", "sighting--3e80777b-40bb-4695-a95e-a1bec7c9a57a", "sighting--db48a370-80d7-42f2-87bf-8c6631f47c2e", "sighting--6b863817-ea01-4ad6-a32e-a264baf37330", "sighting--bedfdd22-f514-4e71-a8fe-8a89929581de", "sighting--4f43fc7b-dc91-4e40-a656-221329455d9f", "sighting--de82e5f3-30aa-4213-8505-de2528d75043", "sighting--f182a862-0301-4349-8264-bbd50d49eaee", "sighting--d151d153-0c3f-4ffa-983a-c4eb21927a57", "sighting--cffa141f-9513-4ac7-a85d-2417788686ea", "sighting--4f54dc4c-3424-4c92-afbe-3e8af9806507", "sighting--8d3adc03-4c46-4b90-af71-a8166568d471", "sighting--462cde6f-9cb5-4a60-9f7c-ded9f59adf8c", "sighting--e9b5ebbe-c216-4dcf-8cde-6718c992125f", "sighting--ab44389c-38ad-409c-96a8-1094933da4e3", "sighting--e4d8b54c-9cbb-43ae-93ad-d4e8909f22bb", "sighting--6032348f-ff6f-4e73-8d84-20f3c16a8f3f", "sighting--7e96a5da-e151-41ba-8871-818244598904", "sighting--9ce52101-9575-4518-88a0-3a85add8ce4d", "sighting--80adfa2d-aef3-491c-b503-48e230a537f2", "sighting--2b81b1b5-2727-48d3-b172-3fe156ebbef0", "sighting--2ac7ac5e-e2d5-42c6-9eb3-a57415206780", "sighting--ab54e91f-db68-4314-933a-4f76c871c933", "sighting--d9def8bd-03c5-4711-9f42-c5bfd39a7b41", "sighting--a31953f8-2d97-4f61-aab6-76b0f90480f0", "sighting--ed4dcc87-964b-4a1a-9e64-313bc6ee865b", "sighting--ebed0488-37ff-48d6-b775-7da83b22d6e9", "sighting--0efb03b1-2a7d-49f5-858b-ff4fa56037c6", "sighting--c0dbed5e-383f-4d84-ba46-c13a12a27409", "sighting--e0201c62-e73a-473e-b7f9-3d7766e78c89", "sighting--947ae0d6-c301-42b6-9c8b-325174355330", "sighting--b7902f45-27cf-4119-9d7c-4338a4091efd", "sighting--d60f1387-fac5-4107-8a92-6b765b30e0ae", "sighting--b6e11644-c211-4017-82a2-2554f0dde7a1", "sighting--f3f4c9cb-e1c6-429a-90ed-a012115e4090", "sighting--0e94d3ce-3804-440c-8af1-25e22659d5c3", "sighting--99cc84a6-7fee-42aa-9c29-c56a7d2dcbff", "sighting--6a1ef97f-c311-4bfd-ba2a-54eb17996119", "sighting--9332ea4b-620c-49a3-904a-5d9e59c3dde5", "sighting--348f3e95-d7a1-425b-895d-e299e66326e7", "sighting--ce8a6f2e-6f74-4909-bd10-933ca736e974", "sighting--85d98f9f-623e-4094-810e-6598b0cbf25f", "sighting--0d1eb3bb-ac0a-49c0-9b54-65e3579f50b1", "sighting--81c77536-cbcd-483b-a8e9-874a460e5641", "sighting--6dbf98ed-d7d6-4af7-ad5f-6f21d4c96d83", "sighting--c054134d-2388-4f87-abe4-6e893813f8ea", "sighting--ee26c712-0023-42d8-a0e2-408045224aa1", "sighting--82719088-b2f1-4a76-a68e-540a0a868a3b", "sighting--81385a08-697a-4036-9960-32ce901e5ece", "sighting--76990956-7565-475e-8f05-2903ffc5ebfd", "sighting--41ed957c-cee1-4345-8d11-926e17ddf8c0", "sighting--b8db7352-ff15-4fb0-98a5-e80fb192399f", "sighting--38d2f3f8-1a0a-46e2-bfbb-d5d2fbdfea45", "sighting--d3b4e519-5489-4a60-8a41-2c277e20b306", "sighting--89d12572-b215-4f1d-878c-1c956fbf36e8", "sighting--e6d7c411-dd83-4a15-a8c5-b102af818ec1", "sighting--f8af4ba4-09b0-41e6-a282-805e23517c46", "sighting--205c7da9-50e5-45de-bebf-3f5ca3d78536", "sighting--b23dd421-5dd6-4f94-b56e-cff34cd297ee", "sighting--fe9dfcf1-7a27-4085-bf42-120ac81f381c", "sighting--0081cf77-cd51-46e9-9d69-e5d0b594e176", "sighting--29a80fe5-c966-4d3a-babd-11bb1edff83b", "sighting--df593366-b349-445d-8698-1e3087b38c99", "sighting--683d46d4-e915-41c4-8c1d-60c3196112a4", "sighting--7d288a05-5e73-4f54-a973-1a5b868466b8", "sighting--3835c0ce-bfd1-43ba-b793-8ce1e60221d3", "sighting--bfdcf0d2-9053-40ba-ab63-319cf01f1347", "sighting--d07e32a8-c6ca-419e-aec8-80e526ae27ad", "sighting--8c0ccfc0-43b4-446c-acdd-4dc7a3d54872", "sighting--43d6885c-1743-42ad-8729-3188dc4b652b", "sighting--e5ba6532-aa2d-40fc-8485-271c62e040d6", "sighting--2f0212e0-af33-45f9-9440-4dcf545e9f06", "sighting--6733ff7a-9ee1-4432-a6a1-d13c5d7621b0", "sighting--b1b6adc6-fd0a-4835-b97e-31506f78ae3e", "sighting--66a5a23d-1b7d-46b9-840d-ed699b9393b1", "sighting--3a4aa3c7-5635-49dd-b1ae-0f628b6d2799", "sighting--eb338637-56ac-4b28-9b5d-b7ce791d1515", "sighting--b9c1e0e4-a3d2-48a0-a57c-039c671d546e", "sighting--7cbaa74f-e2ff-4ddb-96a5-fae489ea895b", "sighting--855c67f5-9ab0-412b-b214-3e5839423741", "sighting--acc85db2-1cbf-45f4-8079-f923373740a9", "sighting--12f49115-92ce-49d1-9c02-188683667d5d", "sighting--e1e73f4d-0629-4993-8c30-0aed1b54d0dd", "sighting--706e151e-f504-405d-bbbd-bd2e91b4057a", "sighting--796cadb3-e90e-4c24-95d7-0465172cbf70", "sighting--36a4fe45-6d06-458d-8755-f9664ee9ca97", "sighting--7cd58820-27b4-4b70-a0e4-d56aa83719bc", "sighting--bf053b24-03ae-45ba-bb5b-f32b233fcabd", "sighting--3418ee89-4b6f-4562-ad55-f043a0dd2315", "sighting--b1b77c41-7c01-43e1-9871-1ea5ab8f82a9", "sighting--643582e5-26cd-496c-a1b8-49d478a1e7ce", "sighting--b473a145-5e5c-459c-8cf2-108d99cceddb", "sighting--d21fc000-611a-4e7e-a1e6-bac8648bf2bd", "sighting--5a2acea8-f1fb-4d4f-a7e5-81b9e062f738", "sighting--a128865c-ce93-4053-a57b-8c60b720c1f3", "sighting--1c578809-c130-497a-995d-ef839290a4b6", "sighting--450338b8-dcfe-4d5c-900f-4f75be3da777", "sighting--e6664f87-346b-44f2-a5a2-4ce8458f2422", "sighting--b852d1e3-cf94-4a1c-9895-fdad940a93c8", "sighting--7b930086-7574-48d8-b8a8-e24d490d285c", "sighting--7c263667-d17a-4d29-8150-ccefaf4df9ee", "sighting--284e89f1-8fa9-4e7b-ad35-254de7383f03", "sighting--71574891-f68d-4a5c-81ac-df6867051119", "sighting--f961eaf4-a646-4cf2-b770-23f74f27018b", "sighting--f23abe8d-1936-44dc-9cd9-fdd288ec1333", "sighting--1299b303-3d60-4e17-beea-7022cb8a783d", "sighting--aa705aca-d7bc-4e4e-b8d8-ec28d7ccc1e1", "sighting--96c72795-b772-4a12-8cf6-313e13159faf", "sighting--96c11258-2e4b-4889-9b35-5e1f02128983", "sighting--1872115f-f9df-4458-8a31-1b1af355dd5f", "sighting--a2db15a4-ed89-48b5-b327-a50a64af9ff4", "sighting--05ff833e-8d50-4c6f-bc26-79eb77cf505b", "sighting--39f64ef5-9a7d-4bed-aab3-d38c91327a9a", "sighting--e7673282-f926-4d47-b985-4a3479c8531a", "sighting--23610c1b-7f56-458b-87d2-dc9d4df75e87", "sighting--76803fde-691a-4600-879f-4a67b26d8677", "sighting--58dd51c2-1f63-4f0c-ac33-5365c4b928e0", "sighting--a6349b81-5a9d-41ca-a375-f2ce2070edd6", "sighting--38a5a5b2-a8f8-4270-b625-b87a84720755", "sighting--81a9ae66-aa29-49e5-89e2-edc41bd29fe3", "sighting--2f64e4e9-d3eb-498c-a34b-2ff8923de8c8", "sighting--8aa0730c-f409-4615-a720-d4d1be0529da", "sighting--2e3c502b-4e5f-46d9-b779-d4cf834e07d1", "sighting--da69ee6a-027d-4f6d-8f6c-d15e0a88af8e", "sighting--ac0cebe5-bf8f-442d-8f50-01672a0374cd", "sighting--6c986d6f-b2fb-4787-9245-26a4b11cb6b6", "sighting--36119333-53ab-4bf0-981b-a5fadacabe20", "sighting--86d3c9a8-3144-4d0d-bfeb-71d66ab4008b", "sighting--f14d7155-f72d-46fd-a1d3-1866e9bea981", "sighting--7eb1786e-c363-468b-ae8e-52491e59b9c2", "sighting--43ffa206-eba4-44fd-9821-6be6a802c707", "sighting--27d77ced-b941-4f1e-b499-e3ec336fa03e", "sighting--0f58c49c-f11a-4370-8df1-cd4675f7ded8", "sighting--3de9e6db-6069-48b7-a735-6eb01aa42e03", "sighting--4202697c-29ca-42f2-a4f1-2a9157a33b28", "sighting--47b615ca-494f-4a52-8e70-f44236fb19f0", "sighting--c5802479-303e-4c8f-b384-7ab55308aff5", "sighting--9558746d-2761-4973-b87a-2aca864b9244", "sighting--e5f353e8-f3d5-49a6-b050-f90ed4b83be0", "sighting--b502eda6-3981-4793-91dd-79a17bce737e", "sighting--164805af-41ef-4a31-814a-1777249fcfdb", "sighting--9243c1b0-52b0-488f-93b7-c135767d987c", "sighting--766c3b1f-10cb-44a4-8214-234a3dec7b95", "sighting--82a94469-230f-485f-b490-2a6d28a71bba", "sighting--46b7732a-e7ca-4c2d-969f-b1e97f3cfa1e", "sighting--2d7e81ed-84f2-44ee-833c-56c2d2de254c", "sighting--ba922a6f-bc5a-4d94-8f57-6c50430d69d6", "sighting--5bed10e8-b427-4f83-9e6d-623291d24a79", "sighting--04002daf-5c82-4003-8864-cb3496bce41c", "sighting--21d04216-fa79-4baf-993c-6d7f271088b4", "sighting--e6a109e1-70c5-42d9-b2c0-ad6c1142b0b8", "sighting--b552fe69-a16f-4507-92e9-af39af952c6f", "sighting--93ce888b-56ea-4548-ba79-4a1a1d7e191b", "sighting--f1ed460e-f0e0-4475-8efe-be22f75854f2", "sighting--800d42da-45b0-4fcf-ba05-5e9fab07da0a", "sighting--54233cff-11a7-4028-80ed-dbeb7aa2a6e2", "sighting--9c4027fb-3e54-4862-b46b-182990e03dc1", "sighting--65d4ffe8-8e60-4e32-9316-5c0836c4f68d", "sighting--322b1127-b3d3-40f3-a4a1-33667a437b34", "sighting--6b976a7d-835b-41a9-96b9-fc9d5723f821", "sighting--15d49957-27be-44f3-8a28-2f75716e0a9d", "sighting--f92e1b12-a22d-40ef-b72e-48cb80ba9d7f", "sighting--832ef379-af9e-47e3-a91e-14c234a02bb1", "sighting--f499f5cc-cc89-46bf-b782-7e716e016c4a", "sighting--286d66e7-ca1b-471b-b989-d4c8ef5aaeda", "sighting--b652feeb-5575-4f8b-8a09-82656363aba0", "sighting--bcd0db5f-1738-4d66-ba05-81e8e8f80349", "sighting--a3d16922-97a6-49d9-bc3c-550128d57381", "sighting--7077f286-569f-4a7c-9e08-759bf6175b59", "sighting--70e7e0ec-5939-49f2-bf13-fb2b1865e4c5", "sighting--463967ef-ae4a-48de-898d-77ba4f3c839c", "sighting--1180efb0-a44b-4ec5-ac99-72cc0254cad1", "sighting--9029e25d-902c-4f3e-ad43-5d5ee6f764e6", "sighting--2f2233f4-7643-4221-8f5a-b991748a4f33", "sighting--071209a4-b9af-40af-a706-0dc8f27036e2", "sighting--3d80e90d-789f-4425-b190-b15d30e3de7f", "sighting--0b7838e9-8be2-47b9-923b-c6a2eac85ac6", "sighting--49a49089-2e0c-4ac5-ba54-07e344e8c6ec", "sighting--ceedd79d-8f1f-46da-8f5c-2b8e6b4e7afe", "sighting--4c6022e3-dedd-43c2-a9e9-46a38b4295f0", "sighting--f682e0d7-b578-498a-b538-ce11f2403e32", "sighting--aad743de-b259-4df5-91d9-5e473b2928b1", "sighting--8eb99ace-588d-45a3-9506-800f16d6e454", "sighting--2fefb85e-3b02-4ce4-b003-8a495b23a23c", "sighting--b15302d0-db67-4cb0-b9d8-4ca05471d086", "sighting--3d076a04-c638-442e-91e1-7682aecb2798", "sighting--559aadd4-b89d-42c1-9ee1-312156553c4e", "sighting--fbe6a796-abc0-4c9c-af23-b7841867935f", "sighting--bc3b9fa9-ec00-4bfa-9f89-21a081eab911", "sighting--6e5be09e-73fd-4c22-b659-a8b9a3760e0c", "sighting--8bf49657-8d24-43d6-b565-c29cc870227d", "sighting--9dc7ace5-f9e1-434e-8a38-855b35c1d9c2", "sighting--26e6e818-7da5-4bd7-be48-0b830f16c712", "sighting--85c1a628-d369-4f03-8171-1a7821ac0d9d", "sighting--c1153cb1-3d50-4fcb-8b36-65e30b3db6c1", "sighting--6de2cfc8-99d5-4d44-81af-f102cda61205", "sighting--04c55920-1b44-48bc-94db-d71ac2e618a7", "sighting--21d57d7e-fd6e-4207-9cdd-6ffcfb7eb7bf", "sighting--808fa4ba-8666-4263-bc97-272ef28b56a1", "sighting--f92dee46-5bd7-4059-b58b-634065ae60dd", "sighting--b1a33131-7139-4495-b080-e4504e150875", "sighting--93555ccb-0927-45fe-8ed0-eec496e4d58f", "sighting--1dc1a09d-9add-4392-ac4f-509695059f29", "sighting--50c3733d-8bdb-4a35-9121-c0420fc47e3b", "sighting--7344322c-6a66-45cd-b165-26dce0bccdb6", "sighting--5815bbd2-c2c0-4db3-a0a6-429de0ea83e7", "sighting--17529c5d-cdbb-47e5-9772-377f892071dd", "sighting--19cc6402-881f-4f8a-9db1-6ea12123d7b3", "sighting--cbe44300-73fd-4b01-b685-8adf7ffc8aab", "sighting--30357dd5-c486-4f59-a83b-aa35fff1bf5d", "sighting--04857d2d-a4b1-475a-a0f3-edcd4ab12cb4", "sighting--64876658-7e95-4635-b55a-f15cba011480", "sighting--0dc28b50-e93c-4e09-a7db-cdb2a5606884", "sighting--9f42c70a-77ab-42f7-9dfc-09f8ed0d0ddf", "sighting--92c75527-3dbd-48ef-8598-72438b435259", "sighting--18c4c443-509f-459d-9401-d4e05846332b", "sighting--cc3df617-f8b3-4170-b92f-fd772f1604b2", "sighting--1e9f8ae7-b5fb-4f77-9df7-2599315a746b", "sighting--59bb4e0d-f87e-46bf-9d67-f6bec15f283e", "sighting--69cd8ca1-9d3a-4a5c-8193-ede28b548929", "sighting--cadada76-83d5-488f-8c5c-257a6a4febd7", "sighting--01420c6f-09c6-4745-af2b-8f31eadb9579", "sighting--b87299f1-4f4c-4345-b312-abc066bec0b7", "sighting--bc2bebb8-f86f-4d87-bbb2-d58cfc31ac24", "sighting--801dc259-2bdc-4a97-bce7-61f6ef0542eb", "sighting--41bca9db-378f-489f-830f-02f2a3951c86", "sighting--90e00d88-0a99-4218-aa1d-4b2438cacd9d", "sighting--68cef91d-5b97-426a-95a0-48938fd361f7", "sighting--d0394cba-c793-40b5-b284-cf6dbbf88d62", "sighting--61f25983-cc7e-457d-9f24-7c45dbb084cb", "sighting--3c41b96a-1b59-4e33-80c8-c94124aa8b96", "sighting--a202c6cd-7089-4079-be77-ba0e25bb6ea2", "sighting--a574abcf-8441-4b07-bafb-5a3e06c0083d", "sighting--2dcb116c-8c26-4ab5-b2da-6e157fd103fe", "sighting--6e4083b8-93af-4c54-b91a-cf1d6f77c88b", "sighting--e508736d-e3e8-4ab9-9183-eceba72e42ee", "sighting--10108d48-e34d-4d53-a146-95deec5cbfe3", "sighting--a43982eb-eb5d-496a-a5f2-c3cacc5c73c5", "sighting--e5c7cd54-c1e6-45e4-a0b1-15030d080ca1", "sighting--7be3e673-f0a3-47c2-aa91-79325a5c968e", "sighting--37f484d7-957e-4e7c-9880-1f09841bbcb3", "sighting--33f34963-0b2d-41b0-908f-1f6bb6d02ef1", "sighting--4f4f7631-6107-43ad-b770-907f79eb21ab", "sighting--b4fb7809-5f8c-4376-b97a-f5532bee5f3e", "sighting--2123cab0-8edc-40a4-ba99-ca4783bb108f", "sighting--0b6aca5d-1d4f-49c7-a8cf-13b88fada6fc", "sighting--8e3c5b96-8760-4a8a-b78a-3efe5f8724bd", "sighting--11cb2a94-8933-4f79-82ec-d727a2d5acee", "sighting--892e7f0b-1fbf-404e-9c3c-b95ec1c9f09b", "sighting--99978175-4810-47a9-8b80-c70af77e65b2", "sighting--a33168fb-4aee-49d3-9648-4061972b7789", "sighting--ae75e1f8-2499-4ce7-b129-3b45b979c92a", "sighting--742b53fc-8574-4621-aa24-9d116e6bca26", "sighting--e270075b-f012-47f8-8271-ea8a78dedde5", "sighting--bf01bdd2-defc-4f64-8179-179b4d5d181f", "sighting--be7182fa-03ea-451c-89f7-eb276b908a4c", "sighting--6d36feff-5aa4-4837-a8db-b92b6838dc4e", "sighting--ace2afcd-c2ab-4407-ba02-e01f9b2fae40", "sighting--cc1fe2c9-fd5f-4ae7-bce7-cab2f8c91919", "sighting--1e663866-0e1b-444d-a7f2-a115b90c052d", "sighting--92b57d86-408f-4584-9ed8-9ef58bef18ff", "sighting--3268cc31-64e5-43f4-86f8-e8bcf1db8451", "sighting--15123f1a-e429-4af8-8fbe-b1f0c4031b5e", "sighting--f610e9e5-4a91-4764-8f4e-186d034a414d", "sighting--2c04f57d-8c8b-4539-bf12-8cfc02275a1b", "sighting--31c642b8-a596-4312-ad6a-4dc714b8c444", "sighting--9e52407f-8c64-4c4e-8e51-e844a47dc219", "sighting--214ef5e2-5959-42d6-91d0-fda558ae88ec", "sighting--3f2faf7d-107c-430e-a00e-db84c842cb15", "sighting--e31a40ca-5359-4c94-906a-5ee84d969107", "sighting--7dda8e7c-cd73-4996-b8d1-4b23c0ab921c", "sighting--79cdaf39-0505-47a6-a586-8c4e2f9126f1", "sighting--919dfb39-5f53-459f-b41f-cb3631fe2162", "sighting--d93226de-3533-4dcb-a905-98711fcde082", "sighting--fbd64e7d-c4d6-4a71-bbca-419d2b5b6fed", "sighting--adc8cf0d-34a7-4b86-bcc5-52427df2a6b5", "sighting--fe92a198-e520-43b0-af47-3453245bf376", "sighting--6179aecb-9cd8-4b89-9787-cbbcbaacc7bb", "sighting--6d4e8dd4-7ed7-4156-a913-cab731ed080a", "sighting--2d1394fe-dd5c-4c88-bd8e-1882d2fe2a1b", "sighting--966d7085-60bd-4921-9f00-7ff1fb157871", "sighting--1510f402-6155-4286-8f50-b538505ffb67", "sighting--26306d78-8379-477d-84c8-85a12660390c", "sighting--00296638-878a-4d75-b7b0-ded6604e9f6a", "sighting--4786ae09-f2d6-44a6-b347-1b10d9b0040b", "sighting--adcc1e6f-102b-40b7-be15-8b5e0889ecdc", "sighting--31342423-27ba-43b6-9c37-4881d849b6d6", "sighting--23fd5cb8-18e5-4fe0-91e1-d8f6b42f0135", "sighting--25570775-2f32-41eb-a476-99f8326d9ca7", "sighting--d8be30cb-1d4d-4c3a-8ed3-c1ffa8d77407", "sighting--df4693f0-d0ea-4dfe-b60a-2dcff0c271ab", "sighting--f1075249-e5b0-478b-8fcf-bae0c32ef03d", "sighting--8f8de316-d198-433c-924d-89bf820c68fa", "sighting--80d2cdb2-032f-43f1-8742-4a09bcad0632", "sighting--7f717a5b-d957-4c6e-ac30-2b3c1debc922", "sighting--e2792962-b74e-485d-8f7c-9e72a7dc4cdc", "sighting--3ffba810-4829-4f00-a0fd-c603d80851e3", "sighting--22857e38-88cb-4d29-a656-e5c42d0bf2a5", "sighting--b5e79f08-7fd8-4f1c-8d51-165f8c3882a7", "sighting--1649936a-0244-4cf1-8c66-c5dbf07f416f", "sighting--eda49b14-8c73-4501-97db-baf68ca31e42", "sighting--444b706c-b7ce-4181-9078-54025abd7d17", "sighting--221a1e28-12cc-4710-9183-e17ed2cf45c2", "sighting--ce4a1a72-a272-4b5a-a306-710e09137fdb", "sighting--a58e48b3-c566-4ae6-a368-18f8bf9b0736", "sighting--721ca17d-94a8-44c3-9acf-aed2d6b4485f", "sighting--42b69f74-9b66-400e-985b-b3fee0f7bb30", "sighting--54310339-b2da-4f99-9086-84bbb41c6c64", "sighting--3b30012c-4761-4e21-8b23-823142cc666a", "sighting--d4db0f71-a091-4ab1-973b-36466ee5ef10", "sighting--74fcaf63-5b8e-4a75-bc79-343d72e0bb5d", "sighting--472408dd-fa4f-49fb-9e5b-5c449cbfff81", "sighting--f7621e90-3130-4afe-bcb2-7e19987039b4", "sighting--36a011d8-7d95-4190-86ee-82c440a99d76", "sighting--31602739-537f-4d6a-8254-ab5cb570c7e6", "sighting--99e90cd9-b3e5-424b-8bfd-ead1a037832f", "sighting--511e41a6-59a3-4fd1-ac0b-e4a5529ee413", "sighting--ff3696c3-e3ed-49ef-8be7-a1c3782041f2", "sighting--1dfa2001-17d2-42c8-8244-90ef07ede92e", "sighting--001bd08e-ba6e-435e-9ee5-fb6828f5f39e", "sighting--cccc6efe-9115-4f63-aeff-a50b3b4a3914", "sighting--0ff19b24-9b4c-4a21-9b72-4c7a627910c2", "sighting--5a9b340e-3241-4e16-966d-dec49245a026", "sighting--35fa3bae-873a-45a3-8209-31e619162815", "sighting--a17e2266-b7d0-42e6-acae-8260bf265adc", "sighting--e8f95e67-1dd3-45ac-ad9e-c428ceb18dff", "sighting--2d846cb8-d4ad-4d49-a05a-e99c524c1452", "sighting--40a2a283-aabc-4e93-b0a2-7cf6a0f3dabc", "sighting--041f0798-7f38-475c-8d64-4cdf0114d319", "sighting--7d4e6d38-8aef-4b43-a4b0-8823a6840b3b", "sighting--93b8d705-3166-4971-beeb-da7c997553f6", "sighting--66e77380-f23a-44fd-82fb-263079bc8c4d", "sighting--c8f56da8-d815-4552-9340-58e3d72cf106", "sighting--b2d0b490-fc5e-4a94-8319-c661e6cd5900", "sighting--d79c033b-42aa-4ffd-bb0e-f0c520a206d5", "sighting--4b179a8f-0ba6-4557-b097-dda2c20b0b6c", "sighting--5605a837-f002-4276-b0db-fef7cb730545", "sighting--ae4cf2d0-9325-4867-ad13-9be30dfe3c21", "sighting--f2c13a42-a91b-458a-a739-554ae16063e1", "sighting--0a0799af-7bd3-41ca-a90c-9035fa017922", "sighting--f8123a4c-1a00-4585-996f-91c5fb49c8a6", "sighting--c480c335-bf08-4d10-bd4f-24c508282721", "sighting--f4152d71-37e9-4e46-a042-2a2ed75a17cb", "sighting--70cfeaa6-766e-4ac2-a92f-1b0fe8f5c48b", "sighting--5a86255a-b1b0-4c66-8698-d56fdd5f40ce", "sighting--a5c9b297-1445-4418-9c1c-07c157e88f5d", "sighting--8d4bfbe2-a57b-4fa1-922b-68556f1da96f", "sighting--737b884f-6ffb-48d7-bea9-a11da3508cf9", "sighting--925cfc0b-978f-441d-ba27-109768c2302d", "sighting--9ce87603-73e3-4349-84e7-7bce3cbb146b", "sighting--a11c3e4f-aa43-4b85-832a-2a43eb93c1bf", "sighting--563f6200-2c56-488d-952d-3746e75f466e", "sighting--2ca1ca0e-8aa5-4e8f-8a56-ad4bdbac066d", "sighting--046b8750-1093-43ee-8add-102e510fe271", "sighting--ed1fd95c-474f-4d24-8c1a-7bc5cd880989", "sighting--3ca89c4c-1500-4f92-915b-0c365eac41d3", "sighting--f12e5e0f-d543-4766-a03e-e8a08c19aafe", "sighting--474a3ce5-be3e-4c28-9de5-0e1350566143", "sighting--53e8a871-b545-43cd-a20a-952904e8e337", "sighting--9c636bf8-a239-4153-8894-b9f3d0ca8ecb", "sighting--fde867af-3a20-4910-9928-30408feabcb2", "sighting--773938d6-7e2b-42d5-b0e5-548fcdd4d16a", "sighting--f6a8bea9-5cfe-4c66-99e0-3de856a0414a", "sighting--8175f6ae-616a-4afb-926d-f0626f717403", "sighting--885208ea-27be-44da-8898-ef5cd5834c9e", "sighting--80d848a8-a589-4191-88ac-978d42b24001", "sighting--384f2b39-a45a-4e4f-a452-fcd0ff5bb997", "sighting--4c7958e9-c940-45fa-a017-11db4d14cad9", "sighting--370891e5-9399-4e36-a57f-e139adfb2647", "sighting--11f47d67-f789-44c3-ae74-25ee3557c272", "sighting--76610920-cc67-4cdd-9614-3d2cd36bf2db", "sighting--127fd279-6686-47b4-8823-86b7d25209ad", "sighting--c0858bac-b109-4c23-ae1a-71704f7784ad", "sighting--2d126f10-28c9-4bcf-8834-b4f347ff556f", "sighting--89d08f49-268c-45b6-8d2a-20d28cab3c74", "sighting--4d1828f3-1fe4-400f-87ab-f4b41cd1de24", "sighting--ded1b30c-1413-4482-8591-559693453384", "sighting--659d5f4e-5b2b-477d-8e24-f9c141bda518", "sighting--8797f9d9-5097-431a-9488-1327caf9b297", "sighting--a06c7601-3534-48d0-ba43-6a06a239ba67", "sighting--28fea02f-6108-4e6f-8b04-ba2a855c4a28", "sighting--fc63af00-9e7a-4524-ac40-ae396328c35c", "sighting--3461b6e0-ded3-4520-9313-68f3edf100bb", "sighting--e943ef71-980f-4858-b0a3-cc90e5567776", "sighting--9a5c4d9f-907f-44ed-8f1f-5afb98bcd734", "sighting--9ce92cdd-2b15-4915-8da7-4a4e0ca46dc8", "sighting--c03b151d-a30a-4cf2-88bb-ab2a6a7e2ad9", "sighting--de4ef6cf-691f-4e3f-a49d-1a5691698868", "sighting--4d210be2-4f2d-4cc9-8f5b-d181e6962ec5", "sighting--fcc7cd94-addc-49da-b298-87c66b2fa054", "sighting--470f2482-05df-4d2b-9325-396887825d9f", "sighting--f7f822f6-9743-46c7-bc82-4a6614e0f135", "sighting--486efa50-d2e3-40e9-b9ed-4b39ea0d853f", "sighting--47c540e1-3610-4a96-aea2-d6aaf2f63717", "sighting--e3c434d6-aaf5-491e-88af-06a754ecbc17", "sighting--e7d383a3-47e5-4f52-82ae-4bff4a6cd637", "sighting--5ecc3562-8f4d-4043-a1e9-f76bf46dea74", "sighting--06f940a5-58c1-4494-8b23-89a5e13ab776", "sighting--39772662-3c55-42e7-8224-dc8685f1890d", "sighting--c8947a66-bd1c-4b85-bcc9-d2c6911d1576", "sighting--19e22435-6991-4649-917e-d52f1f0d4ba3", "sighting--37baae34-9040-4543-b253-cb785f49bbf8", "sighting--3f55e1b3-9d13-43f0-b781-e75d277b3f0d", "sighting--3d136367-f1bd-4157-b217-47744e47b3d4", "sighting--926adeed-80ed-4ce1-90e5-09066917758e", "sighting--69565b96-d407-4a58-863b-8fedac7cc6a4", "sighting--040a45a3-46b6-4f4d-8c6e-018115da63bb", "sighting--2506f9f3-551e-47e8-8d53-43652505245a", "sighting--0aabd4b8-610f-4d22-9bd8-e4cb7189815b", "sighting--c0278c7d-903a-4835-9301-d8c35a82dd0a", "sighting--15e139b1-d3fa-4615-93e3-88753e9f7f45", "sighting--8727d386-3c47-4c92-98b3-bac8d51c0a58", "sighting--e551d288-97b4-4ba1-8a42-a8c978e0784a", "sighting--0b4cf026-7c6d-4f2e-aba7-9effaf61af3d", "sighting--9cb6bd98-e014-4891-b8e3-4dd3f78bcaea", "sighting--6c477ce1-77bb-4d05-a45c-db491ed3cc77", "sighting--1403362e-73b3-41fd-8333-26d699cc489a", "sighting--30abdb8f-45fa-4c28-8208-b4c12a0a9c82", "sighting--afe75d2f-abd4-4f9a-a62e-d3a415b4409f", "sighting--d013a893-131c-44b7-a114-c1dbd907f59b", "sighting--93598bfb-1a04-4b7c-bb98-9e6355ac3d6d", "sighting--090a827c-8446-4b25-b28d-dbe236570706", "sighting--d5d0c2ad-169f-4a09-9334-013e76855190", "sighting--dfc35b16-edc1-40a0-8b1b-542aed874853", "sighting--0c741d68-72ad-4d48-86e3-bcd2d4802228", "sighting--e8fb819b-ddfd-4259-9fc8-c076074b1fe4", "sighting--031f0c21-b4c5-4f8e-be7a-9c47a0e20aa8", "sighting--5b917378-702c-4377-b3e2-d072ee641177", "sighting--c2d62076-160b-48fd-89a5-4a41633a89ad", "sighting--cdc71377-e214-4fe2-99cc-75b331f1e415", "sighting--b9caf1d3-2e7b-4916-9151-4f04278438b7", "sighting--a78ffc29-55f0-4357-a59a-29e6ebacf757", "sighting--91d311c6-b87f-4df8-9b90-3fa8e202e2d9", "sighting--71299bf4-7fa3-4347-9e80-6d05379b3500", "sighting--ec9e728a-3267-4b88-a095-6d5913de1234", "sighting--da87d8ad-ab42-4bd3-ad98-0bd25b6517f1", "sighting--12b089ef-3f89-44c2-80df-53c92b362ed8", "sighting--8c2f939c-73f5-44cc-bd7f-c526eddd0c01", "sighting--bb53ddab-f913-4d31-b1d7-b341128c0fe8", "sighting--4bc2b53f-9fcd-41ca-afa1-9e8a70027da3", "sighting--33a09446-97e3-4e00-9269-d4f25bd1f11d", "sighting--5d43cb1d-ddf8-405c-8c2f-8ab2a2635451", "sighting--a848fc11-f7d9-4cbc-8df4-2f748c23f86b", "sighting--b7252bb4-ae6f-4d80-a7f6-e9941d464097", "sighting--79831503-d18e-4b9b-aa06-acef6777beda", "sighting--8b199123-d58f-4397-a6c6-607f24b9415d", "sighting--fff6c7eb-ebf5-499d-8623-d2f9e70ca1fd", "sighting--7f185555-3fe6-4979-89ff-e0f06bd27fbf", "sighting--87433c0d-6f36-4069-a2ca-3f4614b2b5e8", "sighting--6c369f3a-01f7-44a2-9e01-c87eb7453f0a", "sighting--c05a950c-9ea4-4c6b-8549-f390c73be5ac", "sighting--1ec08d39-c052-44b0-9a75-55fd707e5336", "sighting--5d48444b-11dc-4fad-a335-7825ee134009", "sighting--2ff53e31-3616-4274-a279-05b28b74fb3f", "sighting--733ce91d-5022-4b9f-bfcb-a7beee418479", "sighting--c0eae032-6fcc-4770-9717-8cc5c0d3a3de", "sighting--abce447e-1fb6-424d-8911-4b053fb787fc", "sighting--f9aee05b-b1e9-4d72-bcd2-c7beb049e5ff", "sighting--2494565d-d272-4f1c-95ce-d860ca9a476a", "sighting--1485cebf-692a-4f05-8f04-895d1a6a5c7d", "sighting--2f40c036-bbbc-47c9-a241-9338cf2c8e71", "sighting--c2c5e092-7643-429d-ba21-d75ce68631ca", "sighting--519c38b1-cb1e-4677-8527-1bd744de2fbd", "sighting--213d6c30-badd-4b15-896c-ea3342e7761a", "sighting--0f2f7f17-9a35-4fe9-b2eb-2b8ce96fccc2", "sighting--d97fb672-a255-4964-8c47-2d9d3243fb4d", "sighting--253a6f51-8eb5-4a97-b3a3-a8e107b8a63f", "sighting--64b780b2-1f1b-454a-b980-7640f0159c5b", "sighting--2d916e8b-8c22-48f8-8e64-96a9afdb5426", "sighting--6c748f9d-0258-44fe-b87e-b8c61610af94", "sighting--543b1bb1-ba03-4734-b856-b8a6ba1c0ea8", "sighting--7eb23fcd-e8aa-43b2-abe8-ddd40a6e50d5", "sighting--0a262e16-9a5f-4aaf-85d3-64421b2298dd", "sighting--d3f6ad8e-542e-4938-9db1-f12323d20110", "sighting--76f2a98b-7f8b-4c5b-ba96-feaaf93cb911", "sighting--0468f730-dd8b-4fcc-8159-5c2f39761bf8", "sighting--327ff784-1b61-436c-b5e7-8d0de4128568", "sighting--fb6267ec-23a3-4c61-9450-c3e18487962e", "sighting--672a6375-c057-477f-82be-0968899cdf96", "sighting--326dd7ad-2f34-4842-8429-9999e979c83c", "sighting--b733f5f6-2ea6-47e3-abc3-9e6ad6356a61", "sighting--798d48c9-5f33-40e6-ade4-7d140c93f325", "sighting--5b35d5ef-c86f-4b73-8bfd-fa00fee68f3e", "sighting--e4566975-be6d-45a1-a292-5b669556f237", "sighting--10ba5977-f856-4ea3-96cb-fa3b83d6ade9", "sighting--869ffac2-37d8-4fdd-b4fb-3d690f2bc3f4", "sighting--e0e9ef58-ef3a-46bf-8cac-c564f71e640e", "sighting--c2d311ab-95f5-473b-9e79-4a9eee352519", "sighting--c19aca77-d6cd-4963-a610-6ec203e01bed", "sighting--f77905ac-5350-4df3-8a59-1b266119ee75", "sighting--ab7ff20a-f851-4968-830e-4e20e7949a74", "sighting--17196c80-356e-4732-b1c6-22313d94ce13", "sighting--b35c707c-c55b-4e69-85ae-be3da15a1371", "sighting--4d50fbf4-28d0-4d03-9620-39ea921c9aa6", "sighting--d94ab00a-faf8-4d31-b1c5-973d3340bf85", "sighting--f7437134-c71d-4e1c-844a-ae94bbcf5226", "sighting--b0da580d-a55f-414c-9cf1-ef575c8d2fc8", "sighting--acd0accc-2372-474f-89e2-264ced65aee0", "sighting--4859658d-8a46-480b-9329-1627c6bf885c", "sighting--b8fa726e-0d62-4172-a0ab-469d1ca4704d", "sighting--3b48cfb0-81e8-4f5b-8477-9f698874ffd1", "sighting--6b5ffc0b-d263-495c-9566-6533ff692157", "sighting--d0f6b6e9-cbc1-45ce-9e29-8d9997842b81", "sighting--1653f5f9-938d-426c-babb-91a1adb2ead5", "sighting--ba1686d7-5caa-4e20-8c15-a101e73a8c5d", "sighting--753c6165-3398-4552-92e9-9fe291182041", "sighting--8adb8ceb-190a-4568-8c65-d6dcaca5f7fd", "sighting--e4f1fa35-60f7-40e7-ac7d-ae99eedac3fc", "sighting--fc6a3623-07bb-4ed1-9cd9-8667ff6b0575", "sighting--0e002146-6a9b-497d-b4dc-30b004b82fbf", "sighting--96f34759-01d0-40ab-a04d-bf1c558941fd", "sighting--b0519954-290f-404d-9441-a02c29aef23f", "sighting--cfdd50fa-de22-458d-be2c-ac260820c932", "sighting--634d794d-6da4-4c64-a559-2947513d0542", "sighting--2bfd0f32-8e29-435a-a2a3-582bbf41a48b", "sighting--8ef9ae95-963a-4039-b27a-354540679b07", "sighting--2b5cfdda-d1c9-491f-8cdd-83cf27ae2196", "sighting--ea9ae5ac-3c76-44c0-bd77-21d7c2b6db35", "sighting--242ec833-8266-45b1-b94c-d4baae48e410", "sighting--94c8b9b5-4b3d-499c-b216-a1644b5d2405", "sighting--1b96d49a-5d45-49cd-b9b8-b438dc69c932", "sighting--2863f4d7-41b4-4068-b21a-cc45149c11cd", "sighting--0d78a6b8-8a31-497f-afbc-086e17f4033b", "sighting--b3715cb6-0fde-4bf4-ab5a-ea593a64b148", "sighting--a043c188-b961-47a8-b501-58ac7b342a10", "sighting--568e3c84-8b46-4766-af9a-e622aeddf92d", "sighting--b78ca7ae-2664-44f5-9aee-157b41ca17c0", "sighting--4da4e53b-a27b-47b9-8000-a6b11399d5ee", "sighting--79028ccc-f487-4a6f-b547-e1708d061dbd", "sighting--ee152c9d-4165-4111-b378-93d1bace59a2", "sighting--45d5e90e-25b2-4d51-8f43-89c657cdcd45", "sighting--20494670-4ba7-40a9-913d-537754deedc2", "sighting--0d8ee6ab-4afc-4573-a7aa-d19c2b3a80d7", "sighting--7474731e-e1b3-4127-be95-b16731e93f8b", "sighting--0be759ca-7536-47fd-84d2-402e579eab9f", "sighting--e305f83b-977b-44f8-8cf2-7ebdaedac869", "sighting--47ab690b-69d8-43a4-875d-2d5052f2b3a6", "sighting--1e1d29bd-a4f8-46f0-a45f-f452fbf9c3ce", "sighting--d09ea4e9-f4f2-4322-a534-07738a1577d5", "sighting--db154950-742b-4595-9fbf-94e66db3f9f1", "sighting--bcfa6ff1-8282-44b2-9918-2158e22c0b07", "sighting--2501f760-d96d-4d1a-b075-6d1d9c18f880", "sighting--60197f77-4475-4eb4-af43-2167916a737b", "sighting--4b218575-94e5-47f8-a464-359f023e05ec", "sighting--b67bc373-f85e-4616-a3d1-5dcca2ad0758", "sighting--3b19f248-f4ea-43dd-af8a-c4de00be3c57", "sighting--4042b408-1f07-42e0-a2b2-e7a090cd0280", "sighting--f22c5770-e924-4727-90b3-47dde1942014", "sighting--0263ea00-af89-46d0-94a1-3677b8d59c20", "sighting--dbeca63a-a960-4e0f-aeb3-ceaf598b571f", "sighting--f356a9df-ebc8-4c57-8c20-09138f1af2d9", "sighting--85e083a8-375f-46a5-8406-ddb5ecde9f9b", "sighting--a2e2ec84-f5b7-4c2f-8453-9cf0d7fad3f5", "sighting--361ef378-550d-4416-a635-987bda24d050", "sighting--ef96e529-66cd-4c40-b909-3a874c41c64e", "sighting--49b309ca-f6da-4fbe-bd19-dfee99131c8c", "sighting--bf560041-f141-4bd4-ae2c-ccba8039c5a0", "sighting--b384f829-7cb9-4e93-8bc7-579e6c3ee4e8", "sighting--51a1bb86-7753-4511-b63a-a5083b9e67e6", "sighting--06fed507-ba42-426f-b7e6-6de3ee7808b6", "sighting--226c6cce-dd68-43d7-802d-1906e0e799e7", "sighting--6c200a9b-7e1e-41a6-8d2c-346fe15b03d5", "sighting--b5b739c6-bd3a-4b5a-8476-e9a0f74e8702", "sighting--d1e14d94-c9aa-49e1-8edc-714e7872acdd", "sighting--bf33ad40-b58f-42a9-ae1c-dcbc9c35d7c6", "sighting--6193de2f-3681-4ee1-b297-d451c3888e7c", "sighting--1a7b1ac3-2b09-4601-a2ab-3820be43cb08", "sighting--380e650a-c508-4d3c-a1ab-5890f5fb1277", "sighting--339936e5-286f-45ac-be50-2c150db286c0", "sighting--daceaaba-87b2-4b2e-9064-6e373eb8d086", "sighting--af8d55b4-8d59-4aa4-9050-f4564588289b", "sighting--f30654fa-f74a-4f70-a253-1afc48187eea", "sighting--e9f2e53a-18ee-4b14-8f3b-8291834bb55a", "sighting--bfe050fd-30cd-4e99-84cb-d7397c154ec6", "sighting--4a287c2f-b1a8-4016-ad38-7c34810f4c08", "sighting--4d331e7d-2bef-433d-9937-068c1c539485", "sighting--182418bc-97a9-43dd-bcaf-c235408638c9", "sighting--7a2e3aaa-df05-42d0-adc8-c0567eab69ba", "sighting--6edd6b58-48f0-45b0-814f-eba67a2fe7c7", "sighting--963c477c-7898-403a-b1ac-912b6d6ee90d", "sighting--479f872d-2541-4811-a81d-596fb764c752", "sighting--8c632f74-09f0-4f01-bfad-c4dcfa960bbb", "sighting--8dab186c-ebfd-4ca3-b6eb-af0210ed8bbc", "sighting--13d7d7e4-81f2-4759-9802-5f8ba2b2c0bb", "sighting--4adf69dd-fdbd-4901-855c-62e2bfdeeab0", "sighting--17711e72-0c1a-4109-a319-1d2108e46090", "sighting--a9927b08-b9e4-4c4f-b811-2ea9e5c5de36", "sighting--74023ace-504a-40b2-87db-fa309ae77b67", "sighting--395cc1c2-c969-43a7-a58d-57def2ea440c", "sighting--0fa3b49f-0555-4fe5-858e-a40974ee022c", "sighting--5e96b725-4024-451e-8fd0-bedfc5fea44e", "sighting--fb4a62d7-a8a2-404c-8ab7-2de82d40048f", "sighting--0370b3e8-42e7-4276-949e-f39ca92f5a0f", "sighting--048a7b49-a744-4798-9762-a1332b53b62f", "sighting--28742c8b-7334-4fa3-ae83-24aa5c8dcd62", "sighting--61c6a0dc-bda0-4855-8f56-83d6c5191147", "sighting--86d786db-7e77-4492-81ff-cef24748b7c0", "sighting--6bb3a39c-5c1d-49d2-a1a0-75fb31d19d04", "sighting--a99d6af8-acec-4e6a-8065-5395e3068d3e", "sighting--6ed33f8a-ed2f-4b69-9664-fc2bbbaaf388", "sighting--6d33ea90-520b-4572-99b4-03b9702640d2", "sighting--0c637e74-0b5c-49bb-b220-cfd65b6ad8fd", "sighting--37b7635a-2825-473f-8843-61b6e3b220a0", "sighting--1cb12d22-325f-4cd6-ac76-14c323da6acb", "sighting--06825b0c-480f-4e82-bd54-0709c33de50d", "sighting--b79b8f87-7c51-48fa-af11-c0a9e4e7125a", "sighting--3394f839-ae79-45f3-a415-0d411aeaea48", "sighting--92629ab0-fe24-4d3a-ae26-125f4de81297", "sighting--091ea7ef-0e2a-4195-a155-3e454911738a", "sighting--ade833f4-9e64-49d3-829b-571752091f77", "sighting--d9c87066-68e6-456d-99e6-383af7b63b0e", "sighting--d089a92a-a9d0-4588-90c2-8d6ecf739d97", "sighting--f0e977e5-50a4-4bc7-b217-8bec157a227b", "sighting--11c3f5c9-76e5-41e7-a648-6960619cee4d", "sighting--cde98594-cee2-4c7a-be9a-301123d54a3c", "sighting--02a60031-1af4-4534-87b0-1d98892826ec", "sighting--5497d124-8d01-45ad-aa53-74ca9d1db468", "sighting--4dbe2695-e3c7-447d-96be-4b72e316b1d8", "sighting--32ae7567-9e45-4ec0-bbf6-40dce8528b54", "sighting--379c18f5-ff5b-4d5f-af6f-9d135f4aec3a", "sighting--e84d6176-e43b-4aa4-b382-a35688296a51", "sighting--50e78cf1-260e-4b1d-ac51-0f358328bdd3", "sighting--3df58a10-fc3b-452f-a2cd-4d9d91990420", "sighting--f94ba294-ba57-40c4-8a5b-c07f2f239d88", "sighting--0eba2b41-0e0c-400d-b4cc-343c23476ecc", "sighting--3a12a8d7-014f-4cf7-be10-bf3137a7e291", "sighting--3f6c436f-c61d-4e5f-a642-4c04e7b8c093", "sighting--af8cb105-3d0d-49c8-a1ee-6b4a3fa308a7", "sighting--c1327cd4-55f1-40cc-999a-f68415228dc0", "sighting--5e176fc7-86cc-464e-b7e4-ecec37cd41fd", "sighting--29638c69-bfbf-4421-9dbb-bf0d8227179f", "sighting--b4ef755f-5cc0-4e27-8d2e-abbaf182b5c5", "sighting--7dfcda59-baed-4164-9ad7-59622549c51d", "sighting--a2fcc9fb-bc10-4ab2-ac75-bff33dd4ebb7", "sighting--0bf6a3af-4193-4f79-952f-9bd14a62e44d", "sighting--6612831e-e804-4f24-baea-83259137348d", "sighting--f2de93d7-9369-4ce9-a756-85abe1cbf3c0", "sighting--aab05c06-ac48-4bd8-bd39-dfb33a07946a", "sighting--a629a1a9-a612-4b61-85a3-21939952ff1a", "sighting--80eb7ce3-9cec-4360-9130-5ce4a17ba59a", "sighting--f70b48c3-2285-4297-8fa9-be4f8dc0fdaf", "sighting--b03ea532-b7ba-4175-a241-9c1c4908aa76", "sighting--2fcea054-b172-4fa7-a2a6-4124d3d54ad8", "sighting--c63350f3-d172-487f-bb8a-f52ded3ef574", "sighting--e0502106-9402-46fc-8b08-d44b4bda8008", "sighting--5a80fba9-c9b5-4430-8c55-f57ddc56b5e3", "sighting--c0d7310c-1243-4928-910c-93b4d5bbdb9c", "sighting--e049064f-54f8-4fb0-a928-cbb58c51a7b5", "sighting--9da50a3d-9551-4ca6-a8ae-fe9033b1b760", "sighting--243c2625-5dd7-4de9-b483-c8e635277619", "sighting--4a419412-0810-4a6b-b909-259e26cd88dd", "sighting--6eff7d0c-fb43-4170-bbbf-cc726ec1971f", "sighting--3433d7e8-de7a-4d64-81e2-efd8baaf1c04", "sighting--c4f2db60-d406-477b-a1dd-b7951577f4ff", "sighting--d356657c-0328-4f45-a904-7d281a556d5a", "sighting--69ecf6cb-f92a-47ba-9d6a-e70558f8261b", "sighting--0550c070-7aee-4ba8-931c-aca393251ba7", "sighting--b98da829-58a9-40d5-a134-5eed9c03e7be", "sighting--59c878d1-86df-45d1-adc6-74532aecf355", "sighting--ec643439-365c-4770-a11f-a16c4343f7bc", "sighting--009988ac-9357-44d6-bb68-f0b1563d245a", "sighting--4a82bab9-93fd-49b8-8f16-d9cd6d247c67", "sighting--0efcf90e-5efe-43b9-ae2c-89844956d008", "sighting--4e0e77f9-ff50-40c4-b4b6-d27c3bf35c16", "sighting--a667fb98-bf91-4f2e-829e-09cd7a908eff", "sighting--803ffc8e-1b64-403c-8100-762eca884864", "sighting--306c4aea-454f-4d99-9d3c-254accd47d3c", "sighting--2ae3e727-32ed-4952-ae63-eae6bf4f8a6d", "sighting--e9dc7ebd-8134-4522-8c69-124478335d5a", "sighting--cb978ad7-d3f6-48a9-a8ff-606d6e55e49f", "sighting--cf1586d8-5275-4a52-a373-737b74a51b9e", "sighting--add9800e-336c-42f9-b8e5-1eb5dbb84cd6", "sighting--378d2ea9-8d6a-453a-bdf9-2289eb6758b9", "sighting--9b744513-84e1-4eab-afc7-026ae228ea0a", "sighting--89a60a5f-f7d6-4469-b300-171018a72779", "sighting--253dc7c6-89ef-4916-b7a0-721ea0e574f9", "sighting--e82c465d-05b1-4508-b1dc-ab683cc4387b", "sighting--aa23b345-f59e-4ad1-a88e-fc1446cc4548", "sighting--3ef45f74-3543-41d4-bea0-f060619039f9", "sighting--28298c14-f4eb-41cd-93fa-77d93eb4b312", "sighting--f71a1506-fb10-469f-9c9b-7bb092408198", "sighting--718a0b2b-e8ce-40bf-be41-2460b32921d8", "sighting--55235d46-fcd4-4764-a9a1-73531d9b8f16", "sighting--114ffdee-5272-4f2d-aa6d-12dec8a13a6b", "sighting--fbb376da-59a9-48fe-a743-76d18d11aa0c", "sighting--8fa83eaf-ea93-4971-b97a-f88fc362ddcc", "sighting--7444fc9c-9ecc-4e1c-a476-64f7f9975f76", "sighting--78017746-f5df-4700-a099-5b7b982e0595", "sighting--62993ab5-4637-46f0-b964-b0638f8643c8", "sighting--4a4439cc-a64c-488f-9a80-2c52f5df1b92", "sighting--2efe8411-9492-4a8b-93a5-66213a991979", "sighting--f6acff0d-b34e-442e-a949-a853b2ad5fe1", "sighting--fa0ba681-0bc7-454b-9cab-7f303d2c3a5b", "sighting--ba829053-10fe-48c7-ab36-0545eb7ab933", "sighting--b9e61f55-44b4-40e0-997e-898ffba1574a", "sighting--ce40de59-b125-4c8e-b581-93b39496b98d", "sighting--32c48886-43b1-4bfc-915e-8b1ecde84920", "sighting--53ad8138-e11a-4df3-97f7-bcd0a5db7427", "sighting--0f04bf9e-7de8-41ef-bb94-9020fdb84093", "sighting--89896dab-e8e7-4c8b-bdc8-918115673315", "sighting--1ea0de1f-4f53-4abd-b585-4f7a8c0c1b9b", "sighting--b8a559e6-707b-4c91-bdac-9d756cd6cc10", "sighting--526caf93-838d-4542-a0dc-a10a55472967", "sighting--7edeb29a-cc69-417b-8190-96536935e95d", "sighting--b94f5d12-0d45-4314-8d59-b3b438313840", "sighting--c7367350-1473-495c-ad5f-b89a308c51fa", "sighting--5e0edcc8-6545-4ffb-9cbe-4944df43ea23", "sighting--17ca4583-7eb8-43de-816c-3df0d0d9e8ca", "sighting--e72f5504-3159-4dfd-8b32-64b2ef88d899", "sighting--0d122d9f-b265-4d2c-a1ce-dca17f3fed94", "sighting--77642813-f9a9-46e8-be6d-b2aba9f4f554", "sighting--31644786-e33c-40b4-a632-bf51f0438f53", "sighting--ef360d67-e283-48a0-a9a5-17d5a5091aa9", "sighting--d5a8676e-1a40-4725-b40f-396deeb82678", "sighting--3f150307-4c99-4daf-a2b9-834613c4af94", "sighting--28a20274-3ce8-49b8-8cc0-2c50299e28fa", "sighting--cc5fc410-5aa6-4b25-94eb-e4cbed22a8e3", "sighting--db50ebd0-5a5b-480c-b239-b98e093fc5ea", "sighting--2fedc696-e0e4-4b15-bcd2-cffe91ab554a", "sighting--3681bf0a-de74-4bfa-8e8c-92db3aa1943b", "sighting--40f68c87-9a0e-4387-81a6-810040b9fbea", "sighting--5f42381c-03cd-47a4-8c76-df0f7537cf8a", "sighting--ca38ca78-5bd3-4ad4-8e44-8aec1adb3920", "sighting--ec0ed6ff-0f11-42f8-b322-d4a633bb688e", "sighting--8300f421-c35f-4b42-b9db-2231c7ff8e21", "sighting--6ba51ac9-5a79-4f44-a911-7dcfe4ca7cb0", "sighting--40f3c03b-b6f1-45f5-8f64-3c4b276619fa", "sighting--33b9f7a5-41c6-441d-af54-e1dc2aec5051", "sighting--4e1e9c4c-6151-423d-87d5-ed5105c454a6", "sighting--1e21bc64-dee8-4dc8-b4f9-e66f910bfbeb", "sighting--f3c1b7af-c1b2-4d2f-8639-d92f53e7a115", "sighting--f851ff5d-9a4f-4c54-82e5-f66d9c984d94", "sighting--e4a71196-e341-4d12-b26b-967d8735dc21", "sighting--c374cf57-e895-40d5-9b68-7f5c70c7c4bb", "sighting--bc436999-ce62-4148-aea0-398c995d173e", "sighting--4ccb2a5f-66b3-4f03-8e0d-3c991cf5320a", "sighting--2fb8aa7a-4f7d-48b4-9801-a3017563544a", "sighting--2d8cd4a3-cb0b-4f3d-9b03-32f1693a1611", "sighting--379feda4-4e53-44a9-a123-1000d4437357", "sighting--43575555-61b9-4f81-9de5-3d1e2d054ca5", "sighting--1348e99d-c648-4c9a-9d34-8557479f1376", "sighting--3b8043b6-da60-4cb1-827c-be55414c84d5", "sighting--8847300e-4dc6-46a5-b8b3-c9e91c2f499b", "sighting--2264442c-5ab9-4046-88f7-084baef189a5", "sighting--b7a0ff9f-cf05-49b1-a3ca-e2b8e804ffa1", "sighting--59e47296-7dc7-4746-8730-d59e459262cb", "sighting--bc03dfc7-f49a-4676-8e78-dd1093ffe6b2", "sighting--022cee35-5620-4c3f-90f8-a809101b27db", "sighting--5aa82f47-5e79-4621-adee-cfa56f278879", "sighting--b7309aad-5962-4386-884d-640144a21a43", "sighting--d92b8239-36f5-412e-9dd9-aad19d709232", "sighting--4a2a708a-a4bf-41f7-a691-c60899b21119", "sighting--84e56fd6-55f1-4ce8-8c4b-13659c1ef1e0", "sighting--56f9aeda-24ea-4318-be10-25a728730f89", "sighting--a20b2b4f-a1e6-45dd-80be-ac0ac17a347e", "sighting--0148ba48-b305-41a4-801c-a7ee762348ea", "sighting--ce8da9a3-44ce-4c2d-8d79-1b5bc0743b32", "sighting--c3150ac8-2a99-4a27-a2f8-ec1fd175ad08", "sighting--e43e27fe-3bda-4729-949f-102dc8108e0c", "sighting--71ca9289-1d41-4de6-bbc7-30b24969b921", "sighting--872c53d7-565f-4645-9883-7c0c58d60d6d", "sighting--bdcfbe93-3737-44bb-afc7-25135d098e19", "sighting--c51d2522-2bb9-4856-89cf-2936402bacf4", "sighting--dd8dfa61-1997-4f9a-ae0a-9d9304a9a198", "sighting--3a933e3f-6c57-4ff6-bbed-32ba663aa35b", "sighting--fa08ff19-9e00-4a87-b6c8-6361ea313eea", "sighting--07909702-15d9-4f1e-996f-bf491e4ea180", "sighting--48e100fc-7b1e-4bd9-bd9c-cab77f9bde81", "sighting--6982b132-76ed-42fd-b777-60f3483d5305", "sighting--dedf2d91-4626-44bc-a883-fa9175b02714", "sighting--4d5277da-dae5-4658-bcd0-a85fa2c41484", "sighting--c8181fec-32d8-4a2f-bedd-b464fc63c99f", "sighting--66f0a96b-bc5b-4822-b683-76b9e1285204", "sighting--c53dba5e-9a8f-4f60-9f97-24eb48d45fef", "sighting--abbe8cc6-bc2b-475b-827c-7a9380bd692d", "sighting--90073e11-5be8-4f56-b2ef-cb395200c723", "sighting--35d72805-45ff-4089-a774-f74b98f47379", "sighting--9eeb4a22-7996-44c9-b57b-22d64919b4cc", "sighting--3dd0009e-bb97-4a27-943d-73d57ca97be4", "sighting--d8d062b7-c208-46c5-b37c-dc9d1576d786", "sighting--bccafa95-c927-4e43-8fde-42a91af5fa9a", "sighting--0ba4ae2c-0811-44de-bbd2-360c43e30338", "sighting--7baafb89-0ea0-4868-a071-ea8dfe1ae29a", "sighting--d4085066-31b3-4c1f-95fc-fdecd84ec883", "sighting--2a73503e-6d2f-4560-836c-5ef61eaa2f7d", "sighting--4f17bf21-7d62-4add-bd2c-4584bb2219e0", "sighting--2cd851ea-eccb-4d25-a375-52cc86c2d389", "sighting--94669605-ad85-4009-a4d2-b94dab49536f", "sighting--b2a174c5-1084-4b79-a6cb-e425c09392cc", "sighting--42cc2bd2-1bc5-4b45-96c1-91c6b8339011", "sighting--7d57b882-3ff3-4c11-884b-c4562e9262ed", "sighting--73fdcffb-5ece-412c-976e-c02afeedf716", "sighting--95eb4e95-a507-4faa-bb5a-fcea41ec6cb2", "sighting--9d18abac-8638-49da-a024-a2d83387cb85", "sighting--869a6d5c-0dc4-44c3-b0f7-a4c69c9f066e", "sighting--fc509533-1139-4482-975d-2205f4f5db69", "sighting--51526925-b162-4a74-8fc3-843cf823e31e", "sighting--dc324e04-e946-400d-bd8e-48a9e8647fcc", "sighting--66461f7e-8627-4665-b52b-a1856673f695", "sighting--81eda105-6040-4c54-9f42-d677235b1969", "sighting--0dd0d25d-f794-4888-ae90-21b91ed8ab07", "sighting--85e08589-48c1-4fbe-8b2a-6a0eb9c317bf", "sighting--6733b778-0f06-4fe7-94b9-4b67c3e4fb51", "sighting--a4bbf745-ec20-45cc-a431-540d2f90e3e4", "sighting--a376a128-a3c7-4827-8506-5eeb74da4aa4", "sighting--09ca311f-0910-44f0-844a-6db1a22c5b5b", "sighting--5636d092-2c74-4c50-b019-38a16875b214", "sighting--589f2de6-c2a9-47f8-884c-e9443672cb78", "sighting--ac3c3762-39e7-4c16-bcee-c678fad9e496", "sighting--45fcca8e-8c1c-41aa-ae99-ce3b94648c97", "sighting--d567844e-18b6-4f42-9b99-e546198dfa57", "sighting--adf03bf0-c301-4240-a339-2c23eb664518", "sighting--cd69c6b8-d6aa-42c3-baca-a423cc40fdb7", "sighting--14cce8c0-fbeb-4f2c-94df-b1cd18eb4316", "sighting--649ef21f-1fcc-4e3e-a0fd-93e06f756ea0", "sighting--2024457c-fce7-4062-b844-d42ea340e9d3", "sighting--1530aa20-526e-4ce4-a726-e41fa3dd1361", "sighting--a80bdd0f-44cb-4aba-b4cc-7e66b2f7ddfa", "sighting--c634d968-8db7-448d-820d-eb27d8a7a5fc", "sighting--a6a44af6-5177-4257-993a-d7cb84872533", "sighting--84ca2433-23aa-48dd-948e-f7a4b309a28f", "sighting--fb27f3be-eba7-48b2-9e12-0e2d6ab8261e", "sighting--879836db-46aa-4c42-80f0-441060964b4e", "sighting--6e8e04ff-7160-42da-bd8e-13499a12c24a", "sighting--a16fee5a-a43d-4123-a2d0-7644199b51df", "sighting--7a5cef30-1184-4712-91bc-0d7af10dd260", "sighting--706e0fb5-4e02-4c4b-b0e6-344a7b92ab16", "sighting--c328fe38-a1a8-4784-8858-4ca88d8c26a9", "sighting--d5c82ac6-e756-4461-b024-10fe1815e676", "sighting--787eee00-9ee9-4759-934f-900a0729472b", "sighting--55f9e81f-9d67-469f-95fa-3c6c6fdb9022", "sighting--1e57df16-97af-4202-af96-aa394785a5c8", "sighting--dca2fc60-7d44-4083-81da-234022e100e3", "sighting--a6f87118-8072-48f3-981f-e641d872eb88", "sighting--03f94d2e-9784-4110-9c27-87f1d8c81707", "sighting--e8378b13-b22c-42d6-a088-64fbf4351813", "sighting--27214456-cfb4-4d93-9cf8-d518a6515ee7", "sighting--be43d1c3-83c5-4cd7-ba48-11cf81dc2352", "sighting--33190934-5f8f-4e26-963c-30cae5c6d579", "sighting--8b2a84e1-a84a-465c-9e07-96fe3ffd8a78", "sighting--293100fa-446c-4606-9618-3631071cb2b2", "sighting--6a8eafb3-6fc3-47e2-a1e4-ae5f493c9141", "sighting--ed5c883f-103b-4cd1-a9b6-445b7ea3a8c6", "sighting--b73c03a9-20fe-4ff0-8585-ce55d37883ef", "sighting--2df41b6a-777a-422d-8040-b3f556dab6cb", "sighting--c06fbbbe-647e-4b25-af6d-7222a3129c79", "sighting--8e5ff323-94c5-4aaa-840a-6062fb7b5e30", "sighting--8e383caf-ec6d-4219-a7e6-b121c95fd964", "sighting--0e968060-6c4a-4976-8ec3-dca9a59510b3", "sighting--fb7f8697-2906-441c-a12c-b5d1606edf39", "sighting--0aeee411-9cc8-494c-95c9-cf5e245f563e", "sighting--63f5e65b-cd54-4cb4-b85a-817323ab3394", "sighting--b8ff8741-f4a0-46b0-b14b-b6641e4c66c5", "sighting--c7a0c0e1-09f0-4cf1-bc12-d9af246c0781", "sighting--4d68d03e-7cc7-4764-af55-88f36d62219f", "sighting--2a432d95-7769-4f2c-a2a0-be4eea81fdb1", "sighting--e0abfb2f-98d6-4df4-b860-4abfcf201673", "sighting--0ebd1e0d-53e2-4464-9a03-f877de70832a", "sighting--a657aaaa-150b-403b-b1c3-6717308371af", "sighting--22b44bb8-3936-4c2a-9aa9-ed542d309430", "sighting--b5c8dcce-b56e-48b1-8ed7-9209a7ac0320", "sighting--26f784c9-524c-4833-9210-a090adab83a0", "sighting--2b07a0d0-ae2b-4be4-a6b0-8831295db08d", "sighting--2c0f99ac-fdb4-4f6e-8cce-fb44be01022f", "sighting--ac9b2fc2-e3bc-4afd-aa80-6ee4f4d9be1d", "sighting--cdd82eb4-2f67-47a2-9782-171509725ad1", "sighting--f49ba19c-242f-44a8-be6a-70230640a2a3", "sighting--bf4c40d7-dcfb-4256-a83b-9e7edc77d63e", "sighting--44581da7-c4c7-41f5-9ed6-4967f7d6df1f", "sighting--a1b516a8-eb1a-4e46-8ba4-40f7c696f0ad", "sighting--38f2ca6a-3183-4347-b0dd-7ab4920db05f", "sighting--07bc0520-c2ae-4d55-9c53-126263eb5e83", "sighting--a12d3654-e554-4618-9330-63673cfc259b", "sighting--0a1f3e8c-2431-4dd6-a823-274d5d28005f", "sighting--2473434f-9780-490b-a8ed-858d73e1cbe4", "sighting--794a4808-ffb5-4622-8f43-e21e40a69e7a", "sighting--21b3f17c-e391-4477-bc56-378872250d0d", "sighting--d242b6e3-0e7c-484f-8476-a50d1b865ed7", "sighting--5fb39624-48a8-4af4-b3f1-a842e952a263", "sighting--88eee0e2-11a2-4e5a-bc84-f36b7544d1b0", "sighting--28c1e459-4fb5-47de-9bd6-7f945d469cb3", "sighting--117a2f24-32c5-44df-b223-686110a3f9cf", "sighting--9d71a799-1bad-47b3-92a4-64a1fbaf8dba", "sighting--9babb6fd-f729-44a7-bfca-69cf20df7718", "sighting--4efad1ae-2625-4971-b2df-93a7927f6547", "sighting--233f97dd-4239-4b79-91ce-9633f36f836a", "sighting--b0fc7508-6c6c-43c7-a641-36ddb3d70c38", "sighting--a55025f6-4f43-43de-8d90-ea48602e5ac7", "sighting--f208b7d1-d8cc-45ee-8072-43ee88035260", "sighting--a8530224-1128-4ae8-9cbd-3af66515a03f", "sighting--d67e25c1-0a35-4d18-a2a3-37a5ea5837c4", "sighting--9a3486e6-f53d-4c5d-a52b-2462bea77273", "sighting--f28ecab6-e8eb-4f3d-95bb-3ebfb41599be", "sighting--d30032a3-817b-46ee-b147-0ece9af5706b", "sighting--1444a7f3-c980-421e-8bc5-8755fcad08c1", "sighting--3c134c40-a8d4-4cdd-a4cd-131ff4c0636a", "sighting--e569166a-c9e0-4a0c-9f32-9bf48d25cf10", "sighting--9935b983-8af7-4092-81d1-c9b8d972fd52", "sighting--99c77d9c-db68-4867-bf24-f352aed9411a", "sighting--64c96b81-7575-42c9-aab2-aafc7e5dc174", "sighting--4e8dd339-628f-4a89-8d23-659491f87f12", "sighting--378b2336-c648-43b4-9593-bd49e5a310c4", "sighting--b1d19924-f7a7-4375-a164-01edd9e5ce99", "sighting--81963f90-6dab-4502-b407-483a47648cfc", "sighting--705201d8-fa6b-4997-ac0a-909621424255", "sighting--5b62c26e-fd3e-413a-8ebe-5cba0c0bb985", "sighting--791d3ff3-92d8-4042-a926-2a2f20e7489e", "sighting--2b662044-b6d1-4132-83fa-2a032c735774", "sighting--f4e051e3-970e-47cb-a1c7-2bf3bd7863e3", "sighting--17f2724d-a445-4498-887a-dac26bfbfd3c", "sighting--b9641a7e-efd9-4d2b-9342-9d5167d78f87", "sighting--f785cf0a-5670-4d4e-a735-82ab16872ac2", "sighting--333777d3-b324-442d-a1ac-a9d928e46e7a", "sighting--d1fadc4e-d827-40ce-9fa9-5723ac879e56", "sighting--35bffcc1-50b4-43f6-9933-231a878503d3", "sighting--21fa2a62-c7dd-4957-b9d3-53646cdb8e43", "sighting--c97af1ba-21ce-404a-865b-8ff5f46cc377", "sighting--6635e77c-a3c1-474a-bd11-6bb944bea0d2", "sighting--767bfae6-0821-4efd-b314-16260bd41211", "sighting--281fad45-9d7d-4432-9249-60f7c6dd635d", "sighting--4c171964-2050-4e04-82f0-e156cc3b1c82", "sighting--8e3d4b60-b21a-47c3-950b-2d29397caaf8", "sighting--f6d6d205-8ffb-4561-ad91-a149ae6da4be", "sighting--6b1b5b20-08a0-4506-bfa6-ac86fd7eeb9f", "sighting--86b535fd-8bf9-429d-b312-70782e437cce", "sighting--84db0f4b-f429-448a-bdff-ed8ffb5e4041", "sighting--47f04ed6-238d-469c-96ce-2f5e4a9aecfd", "sighting--c4df8b55-ef2a-418d-8669-561496b36c0c", "sighting--164ebe19-9c52-4303-b33e-80ab08c0bbff", "sighting--248ca562-1e09-4ef9-a2ba-35d9b9db3ae4", "sighting--b3c36633-30b9-4398-a82e-75d132070826", "sighting--f36eb394-65dc-4000-9805-5726e9a60870", "sighting--de57fd35-2563-45b3-87dd-eed3df9cd7ab", "sighting--20a22e6f-f155-4a06-9059-5aefb45fa01e", "sighting--5a1d6521-647c-426c-ba9f-c6108c817b25", "sighting--32134239-9f1d-4714-9a85-48d8d850aabf", "sighting--6bd0ae6d-e5d4-4067-8087-d96f210a6b1d", "sighting--efdd907b-8a86-4547-ac58-462c364746a5", "sighting--42d9e679-7ff6-4915-a1b9-4185bcb68a69", "sighting--bca6699f-c59b-4dff-a18d-ca9fe169470c", "sighting--eaf546fc-b901-4ecc-a0d9-92b6d148f6bb", "sighting--7bca63e2-47c8-450d-8112-fa184ae4aff2", "sighting--a04c5364-5d91-4451-bd73-363ef07fcf24", "sighting--9b03a68d-7b38-4c81-993e-0b53980fd4f8", "sighting--0f89224e-7740-4e97-86ff-b1bae1cc0e14", "sighting--b042e3b8-4ed4-4fd1-9ccc-db0d330d7083", "sighting--dffc4b06-259c-4d31-98ac-cb888c755a92", "sighting--ecddff18-ef89-4e2c-ad9f-c7f0fae6bce4", "sighting--f0279c9c-9f7f-4206-8d5c-30b916283e70", "sighting--0ee8534a-4b95-4196-9b8b-a843a59506b0", "sighting--5e369a8f-3773-40a3-88a6-2744d9f9f6fc", "sighting--d8f1b536-0827-41d8-afb2-b69ae2bd6c0f", "sighting--ad392fb6-c151-46d1-bd11-95df2ef35556", "sighting--ac722fab-939d-4369-86df-22254847087e", "sighting--b44ad245-50b8-41a4-b7d3-0a98896bd101", "sighting--2efcf622-e984-4c63-81fa-23c3f3028c75", "sighting--025c8af9-093c-470a-b178-2516315a7ba3", "sighting--eecbe595-1709-41d3-9c25-f3edbb3145fd", "sighting--816c9706-7edb-4374-ad92-c0c7057153ed", "sighting--32452dd8-4da9-4496-be16-003cc0f51d57", "sighting--cae3f5c3-366c-422f-b45f-f5448c90ab52", "sighting--ae8db155-0f1e-43d2-918e-b01e5843ba75", "sighting--cf855c61-3d8d-46c8-94fe-937e4a3a5f10", "sighting--5af61b96-345c-4935-95ff-bf3ff8eab0ef", "sighting--ee87cc69-4d74-4d97-99bb-7a7b1457e572", "sighting--cc74fb1e-cd0d-453f-9472-60622865b46e", "sighting--71788d1e-f6e8-4cfe-98a3-50ebb18de72d", "sighting--1eb873b6-5abb-4f77-be9f-208257f54c06", "sighting--9f809ad9-e8e7-4d81-ad00-afc62ceabc0f", "sighting--a2c51a2a-3193-4d2a-bb21-a7e3d071fa48", "sighting--ecc6a5b2-ba13-44c1-8827-1f4e1aeb1e87", "sighting--0fe040f2-3d94-42ca-9ad8-c77f95406e50", "sighting--da154566-98a1-4778-bd58-6de0020d18a6", "sighting--5a1846aa-e338-4bfb-8e54-e59be18eeb97", "sighting--4969c26d-f5ef-4933-a727-09139b276111", "sighting--7f24fcd0-e49f-445b-9aa2-12bc59877789", "sighting--e6788351-bf10-4b96-bd72-8a4efae19109", "sighting--7f7e4791-ebd5-4328-9d9b-b526dbdf7c21", "sighting--22885137-04fa-4705-b5e6-78f1adde0663", "sighting--53888207-766c-446c-921d-eec3823dad81", "sighting--3b631e2f-9942-46b8-ae55-cf2ec378b17a", "sighting--0c43a765-4aa0-4712-9251-b47d2616fab6", "sighting--afb2389e-cf04-40ed-ab65-fbcf0d480e7a", "sighting--af956f13-9a52-446b-ad74-8e49eeca8a70", "sighting--67098171-2a87-4ecd-b25e-e4983058cd74", "sighting--173bdd53-0e93-438f-89df-d23956b4aa3f", "sighting--7f789791-9a74-4ac5-b59c-2ed4e271ec6a", "sighting--312e8c45-c7d9-4447-ae00-fbd4e87e5ee0", "sighting--00f4a4cc-3347-47c7-a4c2-82f270b6f39d", "sighting--a0aae17b-40e0-4329-ae2b-768995beb549", "sighting--330ff4b3-d587-4b51-96c7-7da8bc23410a", "sighting--ffbe6bff-ef45-42f9-958c-87f40de2b690", "sighting--b5496f6c-5ab5-44dd-b107-d637ef52d025", "sighting--f7806ca7-407a-4578-ae80-8c860d18e9e7", "sighting--f2a0b072-4225-48bb-8cc1-116db54f738d", "sighting--7fcb1c74-7919-4baf-bd4e-e0bd2d970015", "sighting--c4646dd8-1fe1-43f2-9ba8-316bdeed72cc", "sighting--341ce726-bc31-4e32-8331-7f3f316f7c06", "sighting--9ca71a9e-e5f7-4de9-b47f-50d275a6e5f9", "sighting--dc2e0010-a2dd-42e1-a304-f6b91c1a1a05", "sighting--581320b6-a061-450c-b91a-2b7c731ab9c9", "sighting--a5c4ac27-a9f3-47c0-b555-5658f18c646c", "sighting--2e5106ef-2e8f-4b4b-848b-4ae546a3c4ce", "sighting--c8b0bb3a-8450-41cc-92e5-6c09135b29d5", "sighting--b0bb8c92-3dc7-4ee4-b407-c761f20f8ab5", "sighting--55be5a00-46aa-43f7-864c-ba30815fd0b5", "sighting--5b0ff4bd-0c26-4d1f-9d1d-5601a34fac9c", "sighting--8234a760-1484-4a01-874b-1270d2554d78", "sighting--c4c323f8-b700-4842-86ca-c0cf83b759b5", "sighting--d90e84b3-67ad-4379-a1de-eddec770acaf", "sighting--2972a41f-5858-4625-902d-8414f2cd9279", "sighting--197d9282-9252-40ed-9237-6327f676ba07", "sighting--c99790d4-c24e-4388-a3a7-26ecf2ff8ece", "sighting--770407c1-6737-43b2-b760-ab8af8910dd6", "sighting--8ef3a4d5-9521-41ad-a43e-13d6744b4802", "sighting--d1ae6371-8382-488a-a809-58656c9ae277", "sighting--fbca25fc-fa20-4da3-8e2f-6fbfba5e7cb7", "sighting--05d22c29-c7cc-4b7b-9fe4-b5de06837336", "sighting--e3b5b833-603c-40f0-a838-00dbc2c2f239", "sighting--a277ad0e-5669-4894-bef2-2fafc4da4dc6", "sighting--a4ea83e3-5f4e-432e-81d7-a05ffd7faf1a", "sighting--eec9405a-7bf9-4f80-8a3f-7fbc216ff94c", "sighting--c778449e-cc5a-4e3b-8889-c89d49a18073", "sighting--06b2dd31-ef79-4e59-8e8e-61129516d15f", "sighting--2322f53f-194d-459c-9e6c-8d12b0cacf77", "sighting--893faa78-0859-4622-8bb3-be2097469a7e", "sighting--dfdcab90-0c61-46a2-94d2-452c7f877a8a", "sighting--4fc62a7f-2bc6-4a57-8baf-e4e6fb954e0d", "sighting--0eb49bd5-c16e-4a1b-ac59-346a2a30c8fb", "sighting--af6ab7d0-4add-4e82-b9ff-24c888069b24", "sighting--d98212ee-dd7d-4695-a3d3-bf7169018639", "sighting--d34602cb-e8e5-46de-a047-e2ae276201ee", "sighting--4f3e8070-89e3-43ea-a958-6e081dc2ebee", "sighting--46342643-3259-4eb9-9dbb-dbe0d63d26e7", "sighting--d6feb162-6613-4674-83ec-60d78cd1c840", "sighting--8ea9a399-6561-4d4f-816e-161d6eec765f", "sighting--6e651b6e-ac43-430c-ab96-b860c8e19626", "sighting--6d604e44-59ef-4e99-ab75-6f26c9e79fb4", "sighting--a454b513-b961-4f28-b573-8480854b259e", "sighting--bd62ee19-d8f0-428c-bb1a-a80b608d8914", "sighting--328c8a87-ed9c-420a-96be-308a86a30144", "sighting--199211ee-d1f6-43cd-b342-4e0679320183", "sighting--e79fa12d-5e23-4497-bbb0-b9ab1ee77618", "sighting--a22d3bce-d4c1-473b-a9cd-0c14e0d8fd86", "sighting--e4848af4-f0e4-4725-bec4-126ae8eddef6", "sighting--71b6cb2c-e0a3-41d6-9401-7a770420a054", "sighting--154d8a72-90b1-4698-9eb7-a474946563a8", "sighting--b875cc30-328f-44b1-b1e6-83cea05cf93a", "sighting--9764148b-7b33-4555-948c-cf21497306e7", "sighting--2b80e120-ef66-4470-a4df-bde79c007aa5", "sighting--7c1d795f-9dd3-4e20-8829-cac115907b43", "sighting--654c526a-8106-4836-8cbd-97032ca64ac7", "sighting--5eef60f5-7b7e-4382-92b6-a5a7f8c1e9ef", "sighting--7ee3136a-2043-49e6-84fd-883c3fb69c2d", "sighting--f60f19e2-97d6-47fa-9e0d-31efe809a0b7", "sighting--f699dda4-acd0-45a9-88cd-0c09ae255034", "sighting--6c5f5ba1-391b-46bb-a3d6-3d4c99fef4cc", "sighting--b2098787-3944-4d83-832c-579e8039e7b9", "sighting--b1f49e19-1326-4f0c-9bbc-61aa573a7111", "sighting--e1c31c79-cc2c-4fa6-aa01-e2474a363154", "sighting--d6e7e732-9a65-4ba3-aeec-161b58e585bb", "sighting--72cfca07-1430-4c35-9d4e-ec01c6c953fa", "sighting--fb853368-c14a-40b3-ad22-b952465938c9", "sighting--e864b274-bd71-41db-aade-945cc1f3d349", "sighting--f36319a1-7bd6-4ea4-867c-950f018fdc62", "sighting--8b9f9531-68d9-4e18-9086-4365b5b7ad71", "sighting--957cfb56-13ed-4686-9dfd-9baeb078510d", "sighting--85815db8-dfa5-4f17-84ac-684aae21511a", "sighting--f8eb9120-953a-49e3-ad9b-66dc73a4332d", "sighting--b78bead7-515e-471f-9a27-12e6e7b755e8", "sighting--ec76e6c7-9f09-468a-9c08-8b0816f47c66", "sighting--924a9d3a-c7b0-409a-a448-ac7282f7908a", "sighting--70f1e8a1-1c98-4dbe-a2f8-52f444bfce6b", "sighting--4e47bbca-5d24-4f09-846a-983e01d5dd88", "sighting--a135203e-97c4-4d52-942a-5dfa36ac1661", "sighting--3f92a698-d7cc-4b7d-b5ac-456fd25807a5", "sighting--f9a03f62-535f-4710-afe1-9d06f37c1b75", "sighting--58189461-015e-42a9-9fe5-92afffc87e1f", "sighting--d19dc87f-2764-49d8-a394-962f0e3563c7", "sighting--c6c3add4-1969-4989-a95d-d3a465b3315d", "sighting--3c779c15-5eca-4905-9e5a-a7567459dbf2", "sighting--c7080bd3-bc15-4392-913a-f8d10237ac21", "sighting--6b277b6e-2489-4f54-861a-89478cf30a9f", "sighting--2f623773-c1c7-4089-b38b-fb5c4b2a69f3", "sighting--cc66fbc5-1585-4f2b-8473-31b9670b9b29", "sighting--2d43ee1d-5d48-4ea8-bb3d-6865c96dcf25", "sighting--67406891-9532-4cce-b651-87dda6b65514", "sighting--2f3d8699-f2b8-4295-b7f9-cf91e011f5dd", "sighting--1e3d6d84-6f02-494c-9a52-518ae255a94c", "sighting--cc9d2fb0-9387-433e-be1c-43fe886550e4", "sighting--d7e34059-1273-4716-b362-2b25b301ddbb", "sighting--381f1c10-49c7-4276-a870-1dedc7d0a6d4", "sighting--66dac9a8-f659-4f2f-8dfc-ff3c358cf9fc", "sighting--cfa8d041-db29-4d6e-a28a-9e973e930af2", "sighting--331b4e03-b27b-4ae4-8b4b-27ad3bf3fc25", "sighting--03d96559-9c4b-41a8-b58c-b2892c5572f0", "sighting--c699ac56-0bc9-492e-b0c3-b6a826033661", "sighting--eaf6a6ae-fbc1-4a25-87a6-9ad3683e7985", "sighting--a154aa92-639f-40a2-a621-a099ed119d4f", "sighting--efd4fb5d-10a0-4488-9204-b5c83c80e0e5", "sighting--d7bebbff-d91f-43b9-a582-328671d21d6b", "sighting--8a618a7a-926e-45bf-80f9-255b1433fee6", "sighting--c139956d-1434-474f-aa57-96a10cd866fd", "sighting--d3de98ea-5450-423f-84cf-c08de6375f11", "sighting--aaa93d68-ace6-42bf-98ee-d03d2301e502", "sighting--09725d66-4be4-4609-9444-ec05b41433ca", "sighting--9e14102f-f7e2-4ffe-9ffa-cc50650539c6", "sighting--bb9d9f13-f8ea-4d2c-8b37-f686f4b1f827", "sighting--f0c4f5af-151f-4569-ad0a-7a7ccf4a73e5", "sighting--bc528c2b-41fa-444f-acff-bd163f54e95c", "sighting--ed93890a-31c6-42a2-bb97-e1f0d5ea6586", "sighting--5f2af8cf-363b-48c8-bf05-94df0af1e262", "sighting--9d1261ec-a93b-4e79-a685-c9438bb9cd4a", "sighting--ba3a9c73-5536-4e11-8cce-769d9ad61d84", "sighting--5a5c96f0-852b-46ce-a9f6-05bcb40aab26", "sighting--bdbd41fb-8e73-458a-8052-dc7c03c7d030", "sighting--f2b80b9c-5920-457c-8ba4-7a0dbbfc89e9", "sighting--744259f6-a173-4c9d-9634-178f1f800303", "sighting--dd58466d-abe3-49a8-acc5-cb8787c48a75", "sighting--c01e5a4f-e62c-41c1-96a5-9aef54537247", "sighting--95fdf21c-ba63-4b40-8e2c-36227b08cd1d", "sighting--8934f86f-cb23-4815-83b1-9e141e559277", "sighting--0ca7de13-6511-49fc-bbc5-28804b2d07ed", "sighting--3cd0a43b-e16c-4b96-8404-48c18597c846", "sighting--955fb6a2-8d95-461d-aa34-513a3078f6de", "sighting--1ef61f2f-daaf-4d07-9cc6-1145c82d51c7", "sighting--302315ae-c4d4-4d13-b060-d2bff28dab95", "sighting--79ceb629-a500-4ea5-b5b0-07fce8e841a8", "sighting--3f9d2863-d43c-4c81-95e5-c3e9e9a1b1bc", "sighting--e55ffaeb-a7ba-41bb-9fbe-79f82aebc404", "sighting--41121f06-b81d-411a-959b-f2dc9d5550e9", "sighting--55702a8b-7b68-4cba-bf7a-57f0a8f30ec5", "sighting--5c81737b-ac8f-4711-88ea-dbd7a6353187", "sighting--294037ed-e646-46cc-94d7-6f891472fc8d", "sighting--0bfae984-41b4-4384-b8b8-25366cea27ac", "sighting--f1da3086-721b-424a-8780-4aaf92ac9162", "sighting--0c8c3e31-3cc3-448c-b34c-66555317f4e8", "sighting--aaec270f-2317-4672-b710-756e5bcbddf6", "sighting--0d085975-eb17-4ed7-a0bb-f4f726a33d77", "sighting--68c0f632-da60-48b4-bb90-3813ca3482a2", "sighting--584ec3a1-e3c2-4979-a38f-649f5b5ef98f", "sighting--0c1e1477-708f-4fab-b4f8-635925c23df1", "sighting--5ccbabfc-5bfc-42e8-8ec1-21e994bef984", "sighting--cfa16025-8bc3-4366-8c6a-adcb45126c0f", "sighting--d36089f9-ef82-4f8d-ac88-42ffcb3101e0", "sighting--a3b53ac2-24ce-4df8-8f0a-cf523f8d5838", "sighting--21ad9c0b-1724-4be1-a1b4-cf3b558c2abb", "sighting--448d5687-68e6-4a12-bc06-6bb7619171d3", "sighting--1666d7eb-4504-43d0-bf5a-b1e00ab77681", "sighting--4ec32e4d-b0f9-44f5-9575-b82735033109", "sighting--ccf7a916-3228-429e-ae59-f2aaea521ae0", "sighting--40a0d31b-1f72-4bde-92d3-e4b99a54c35e", "sighting--2783a6ae-415a-44c5-82ce-b8e196d7210d", "sighting--c3cfdecd-819f-4cd4-8b72-214556564f39", "sighting--cd8ee53c-54a3-46e2-af4d-23702c941e39", "sighting--aa5e5f4c-96bf-4c52-93b0-ee1430dbdc4c", "sighting--8dc3d6db-09d7-4bc9-a3d6-ca321b06199e", "sighting--4a09fd98-efbc-42a1-a8d8-198f3284b79e", "sighting--3687a6c5-017f-4021-b6f5-454cb7c6d8a2", "sighting--1e630e70-e234-4475-b908-cb9e42a2654f", "sighting--f0ac8093-2d05-4f2e-a003-a08e98588231", "sighting--cc039e37-737e-4a21-83c6-fb2585b1e360", "sighting--ab1d1fef-4f63-4b6e-ab28-e157b93db90b", "sighting--906df549-1044-4632-af25-dc8bce662ed5", "sighting--d7f49205-2b16-47e3-9a48-f624d67b6c8e", "sighting--4f5ce6da-1dfb-44a1-a417-6a0b9443fe55", "sighting--13925b5e-084e-457b-96b0-9a11c8902fca", "sighting--7e454016-6d58-4546-8b1d-afa666766388", "sighting--fb0365f5-0ef7-4a6e-9852-f259b2b97517", "sighting--01bc2737-be43-49ef-a98b-e716f1d57738", "sighting--5c8d6a2c-a4f0-46a9-a634-ce353e5bcf6a", "sighting--f2754742-46a3-4f4c-8106-da37b1f6a617", "sighting--3afd534d-cfde-4b91-861a-8310951cd46e", "sighting--b46492aa-86d9-42e6-b083-f2d869b4fe71", "sighting--faf911ce-360a-442d-afbd-d16c0d6e66eb", "sighting--1bb70451-05d0-4d52-842d-516f9aa55d83", "sighting--73c1cb9c-abd6-4099-8acd-bae958d36742", "sighting--fe7df5aa-b177-4a00-a426-83ef4233b1ff", "sighting--cb935b73-578a-4b94-a80e-24cc37668ca0", "sighting--07b419f9-47ee-454b-8b74-6128dfcf4415", "sighting--3c7107e4-dd40-4484-bf08-76a14ede590c", "sighting--8a052318-81af-467c-9fc0-77e2a4d35609", "sighting--b0f44eb2-7538-4f52-b829-f0cc08d50d8a", "sighting--f355f550-fcad-4223-9409-1edc54a3f215", "sighting--2a303cdb-ea7a-46b3-b191-3f14ee7ae983", "sighting--9f178da1-9b99-4752-99b8-033401c646cc", "sighting--309f4984-3134-446c-a5a1-f73b6ba342d1", "sighting--842f94bf-5a67-43c2-ad4d-d7e9cb8aed20", "sighting--212f105c-5c42-407a-8cc7-8a4cd86378e5", "sighting--873fa791-cba9-4643-a0df-36269b2fd45f", "sighting--b2f66369-ba1d-4386-8660-f8e042e7ce73", "sighting--ea6f1105-d032-45c4-922d-7c1254012cb1", "sighting--5c640bab-164e-42ff-9d1d-5cdd2e47e76c", "sighting--9647d246-c788-4e48-bef7-2db06d67ba7e", "sighting--e746edee-9ed0-4f7c-b005-29e9495f1372", "sighting--42cfadb3-43e9-4254-a7c1-6f2b7d88e05d", "sighting--7643a967-5126-4011-9d0a-90751331eeaa", "sighting--6459b2b3-e33b-4528-876d-81be761470a2", "sighting--f1a5f5b1-2ecd-477d-ad3e-63bf432109f2", "sighting--bab64eed-6e5c-465e-994f-eea277f78298", "sighting--914ac01b-710b-4e89-b53c-d6655d88f571", "sighting--1a8c863f-a80e-4d1b-8641-11ab5af64d5f", "sighting--dc74159f-e25a-4ee3-bdbe-90e282b63b5f", "sighting--57b1f0b8-0472-4dd1-b475-c76a1ccdf122", "sighting--f8091751-1f42-4e24-9182-eb479d6a7a2c", "sighting--9fc53855-ddbc-40b6-a94e-4058a9e4b1bb", "sighting--44519bd5-c190-4eb3-9684-c389d0525fb5", "sighting--3c86c35c-4812-42f0-bed2-1fa0e4d1de38", "sighting--76315933-380e-46c5-b76d-2c78074c690a", "sighting--7c4d01f2-5f2f-4cba-b113-18878fc7ec11", "sighting--4cf6b2a8-7be2-495d-bb55-ee8066fef58d", "sighting--591f2ff0-7c7d-4649-bd61-db497b88d92a", "sighting--5cae5b08-0e2d-45af-ac73-731ea23b5396", "sighting--d12483d0-f44d-4055-b74a-a6138b37dd24", "sighting--cfdb0d84-ae10-49bd-9e87-bb579c57772b", "sighting--eb6495ad-cd63-4ff9-992e-76ac91f85866", "sighting--9aeb8600-37e9-44c7-9bd3-5dbda3e42a5b", "sighting--2cff59ca-2ac1-4cd5-9956-682e18abea5f", "sighting--f7c43515-fd8d-4d8e-a598-a471ebfd7686", "sighting--b10fc7be-be85-4f38-b5cd-f070c74f9c78", "sighting--1f281480-b03d-45df-bddf-89b036c282b2", "sighting--387f2037-e66e-44c8-b1ab-cbeabc2aef36", "sighting--e2795ded-117e-4b61-9e04-e19c56b40302", "sighting--158fdeac-b42e-46ae-bb8b-8865862d1fc4", "sighting--c4d14658-8ef9-449b-bb76-f67b0bf0de88", "sighting--14cd1463-32cf-43a0-a66f-2438297651df", "sighting--5e690cdb-476b-4db7-b7d1-34b4a9174e40", "sighting--bc38529d-f2f7-4928-96fc-ac356f22b29d", "sighting--1708928e-e3db-43f7-9229-a0d87de92091", "sighting--887be569-464e-4596-979f-55673b95a0b8", "sighting--cc9bf07d-6289-47b4-8b39-b93658d0549c", "sighting--32cc6d24-b739-49ec-b8c3-61b93437ef3f", "sighting--c4780473-5878-439c-b94a-394bd4026cb0", "sighting--34599f03-3b82-4a04-b3e4-a0960b257d31", "sighting--076cb58f-2247-4c02-9473-4ac0b888bb58", "sighting--324d3cf4-9ba9-444f-95f5-088b233c02bb", "sighting--3f33c137-1441-4e27-bea3-eb9d0dc5696a", "sighting--5c364f5e-aa6b-413e-8f81-89de21086056", "sighting--c9abe559-f567-4a1a-bc00-10bedd170f6c", "sighting--c2163a27-cd49-417b-810a-4166cf8ff9fb", "sighting--8404947a-19a9-4b26-9eee-d68e13b62ef2", "sighting--f04d93dc-d8bd-45bc-b2d1-1bdd86bea2d6", "sighting--90122618-732b-4004-b737-888c862301c8", "sighting--08877311-8fb2-4b3f-9e07-ed2643065ddb", "sighting--7de64032-6513-49fe-a298-32df7be4d1f4", "sighting--46b79a0b-59c3-44ba-bb08-ad0d4c81aac1", "sighting--e69e1980-d4bc-45c6-9362-4311efbb8aa5", "sighting--84aca403-a253-4569-83fc-29e520353cf2", "sighting--f394a7a5-1194-4079-a745-cbefc1dbc986", "sighting--abfefa8f-65d5-4681-96c1-6004c3c75a94", "sighting--255fdcb6-1afb-4ded-83dd-1a8c4a4d6dd8", "sighting--507355a3-15df-4060-b11f-7520b896625a", "sighting--bb484c91-f52f-4cf8-90f9-5eafcc1f8750", "sighting--60f54e20-6518-4118-87be-855346ff07bf", "sighting--cd09fd68-82e8-4376-a7e3-a654a45f9bfd", "sighting--f90d9a2e-8594-4300-b560-e7cba79bbab0", "sighting--ec6ba00a-de18-47e9-9017-13904e8d3564", "sighting--317fd64a-7b1a-4c57-ae0c-9f36c76cec93", "sighting--bc43da82-4570-4902-9356-9d0f3423157b", "sighting--65286375-ada0-410f-8bc4-0d71eca73d6e", "sighting--ac12327a-1f10-43db-a69d-d0d2aa0c66c3", "sighting--58c795a2-b08e-426a-9567-d5423d3d38e9", "sighting--4959d55e-fd7c-4735-a1e7-d52c34b80e7e", "sighting--98d0459e-d8c6-4f08-b953-90cf9600fe6a", "sighting--3edafd05-e1fb-439f-99fa-8c326a4500bb", "sighting--cfe2f0bc-ad1a-4886-ad21-6603521dde20", "sighting--3cb26f1f-fa40-41d7-bd5c-8f8ff96498af", "sighting--79bc37d0-9129-4c85-ad3a-9e461726ba99", "sighting--ffb51399-6af6-4458-8b04-15ad7e813c1a", "sighting--1b9b41b4-ef5f-4e46-a202-8afa68bcd91c", "sighting--327e8426-44cc-4e0a-91e5-3c2038a3bcde", "sighting--43f29979-d6ba-46e1-884c-360d25d8af34", "sighting--0801c7f6-a030-4d4c-a7fe-3dfb5132c9fe", "sighting--ab0a527e-1560-49f9-b23f-3a8969142347", "sighting--6b1e021b-ce09-47a1-8962-3427b0b50200", "sighting--5c05a69a-c15f-4257-9c21-34d2116bc022", "sighting--d27a3bcd-d4a1-4d04-8398-85bf0c0be02e", "sighting--0667ef51-2925-4931-8bec-2be897f9ac9a", "sighting--ed1c2beb-416d-4f30-97f0-971f131467ef", "sighting--54edf234-9430-4ba5-91b5-1cccfdb885db", "sighting--df19c412-4ee4-4755-b41d-e3bed4d2d5aa", "sighting--75f0b149-4f53-4286-bbb3-444d748d881d", "sighting--7d151aec-e1b1-44c4-9fa9-5fe7b79a2c2b", "sighting--9897ada2-3d88-4301-8d0b-bc4c90491cae", "sighting--69f0a908-80c5-4e24-abc9-90e1acab45ba", "sighting--a33cb3d6-3f9f-4a3e-ab23-8d35b43b68c8", "sighting--6a126658-adf9-4f2d-a66f-16391ad136f7", "sighting--c3948241-47e3-4f23-8b86-54cf01306618", "sighting--7b309379-b113-48db-8fe7-16be46eb349d", "sighting--4382beb6-1321-47ae-85ee-cd87c7dc8195", "sighting--21102e83-350e-49a2-bf18-e9319e881575", "sighting--f0feb545-7469-404f-86d2-03335ac39d91", "sighting--db8dca71-8c5b-4f44-98d1-abaf44f193d3", "sighting--61dc4468-216a-49da-b7fa-e6efd3c5256d", "sighting--4249bb0c-e63c-4489-bf05-4cb8ec498420", "sighting--f9f3f14b-94c5-41f3-81c0-412efbf15ef8", "sighting--641f508a-00ec-4ff4-bf01-8a260c2b8977", "sighting--cbfb735f-7252-4d02-bc0b-aeb6c94192a5", "sighting--0a042e79-307a-41d9-9f71-1d94d45aa925", "sighting--d41b6575-1d47-47c4-a52a-a42b5526dd16", "sighting--bb1f4a87-e7b8-4a44-b402-f330d21299e2", "sighting--b03ec5cb-39ee-402d-b73a-38f5623b47f9", "sighting--5709dac9-a2b6-4744-ae9b-92ce87a3c6f7", "sighting--364068a4-0e65-43e7-b89f-d403b8fd1d1e", "sighting--e8477e79-9ba1-4ec2-a23f-82701a8b8047", "sighting--7ac60d8b-ab19-4fbc-9bce-ca91685aee57", "sighting--bab97dc0-f776-4e3b-9028-2a37bbbae090", "sighting--b572910d-8a2e-44ca-9eec-83dce3029e7b", "sighting--da65fedf-f52e-4c24-b03f-316c851b2df1", "sighting--cfa73151-a4d5-4f9f-8ad0-cab7ed153348", "sighting--69ad02c7-6065-4d37-a984-75a0715a62d5", "sighting--714743b8-4c34-4f12-a31d-beaa30902821", "sighting--92779ca2-8b2a-40e7-b51f-e15868b92e39", "sighting--d11529a7-8c40-4e93-8923-6d325245e6bd", "sighting--8560a47f-f62e-4c46-b1c0-649a1ba0bf59", "sighting--7cdc508c-ee32-4a6b-b350-9334311c7d97", "sighting--6cdd443e-0c84-4aa6-8a22-884fe0150805", "sighting--e449b459-01d6-43f0-90f4-a682b03fc503", "sighting--fc2527c8-8960-49ec-95c3-3e004940bf58", "sighting--c9e06a43-15ee-4d04-a994-06e9cc18d984", "sighting--f2718c01-3493-4707-b368-f3c015ad2c45", "sighting--1d34414d-8b68-4b8f-a3a9-cad0bcaf84e4", "sighting--3f3688e3-91d9-48cf-b866-4df43f108b7e", "sighting--b61548d1-4700-4b85-9c6e-0828d3db1ce5", "sighting--c531e461-bcef-4dcc-96b5-463444d1f8d1", "sighting--1d510e60-4fe5-4b69-8d77-95f2abb9a895", "sighting--3a2075a8-627d-480f-8078-aa9d97235fbb", "sighting--e7a41d00-8288-4067-977f-b11cca546933", "sighting--9d088a9e-e9e8-4d2c-8a22-aa9d796609b3", "sighting--871a4a3d-ea66-48d3-8623-3e009b74535c", "sighting--52fbe9ab-2faa-477a-a00e-a05480f28f85", "sighting--fccb8ebf-6e3c-4e3f-a6b6-cd73e145d83c", "sighting--13c3af1d-a686-472c-a6fe-f5f03b7cbcb2", "sighting--37e0af69-7174-493c-ac17-0261e5c15df4", "sighting--5c19b014-33e2-4c29-a067-b0cc5f75eb17", "sighting--983c24b4-c313-426b-b702-6d5e66ecc1d4", "sighting--3e7edcd6-932e-495b-aa1f-7d175bfc5f79", "sighting--72ed2ce4-29ae-4f44-8263-cc973e481017", "sighting--d47eaef3-2c57-4ee5-bf7d-8712fa363a9f", "sighting--5e73a411-ead9-480f-b68d-fb482e16d7b1", "sighting--3bf50b0d-e417-4ca5-b765-414c969c6f5f", "sighting--6ff2e096-55ef-477e-9293-eaa6d8516b6f", "sighting--73c69080-314e-4dfb-86f8-95c6d789b434", "sighting--be1d78d0-3595-4666-bcb6-671cbe031b8c", "sighting--1d62a157-38b6-4256-aadc-6c33debfcad4", "sighting--ae21e039-91ba-4451-9cad-23dae300251d", "sighting--6f03d15f-9a57-4238-8c30-7ca3514129aa", "sighting--2e73e310-4d97-4614-883a-7bfa2618a3b1", "sighting--e4d453c9-0a2e-4a7a-8e5c-2ceb2313e562", "sighting--3ef005d5-67a3-486d-8f6c-b79c2eb36c79", "sighting--58c45b7a-14fe-4b19-9d0d-8d40b4b533fe", "sighting--b6aa9539-2c33-4160-a061-535ecdc8c074", "sighting--c88601bd-24fa-484e-8c96-cef983830735", "sighting--7716b378-e00c-4cef-a502-52e2bd1a5e26", "sighting--dc741208-e606-4773-b104-2d29e1786b52", "sighting--f4af9e04-6f79-46af-a5ad-5f32be256a48", "sighting--0bea0844-4597-45f9-a6b9-fd9f164aa084", "sighting--7dda07e0-4817-4194-adba-7c248ffe5431", "sighting--691937d3-bf83-4015-885c-66e8b66fa5ee", "sighting--864f01a4-fd49-4be7-8e39-3a686e48d3f2", "sighting--87419f97-5ee4-4c44-89a2-8415b7b80cf3", "sighting--d1bc518c-f041-4705-b55b-7f0f4fad53ad", "sighting--191f3894-ef45-4784-92ad-d136dfd4ebbf", "sighting--d430769b-d269-4209-a862-f5725b29d118", "sighting--cf687cb0-f68e-48e4-a073-4b207f8c7c7f", "sighting--ceaa3139-9f08-4706-bdc8-a5b2733978ee", "sighting--f46a1f71-1a04-4827-9e6d-6fe1c86e115d", "sighting--05eab047-a230-41c4-89ea-6eeaceefa02c", "sighting--1ddcc5c1-1d02-48ef-ac09-6ca17e9227a8", "sighting--a8e4f73b-8233-4e44-b187-7615b26d5766", "sighting--2df6aa9a-a11c-4d62-96f3-ebe6be995add", "sighting--9c108c9c-cdc8-4813-a3cb-01baaa1f84d2", "sighting--7f7c4f7f-4104-43ba-8160-5eb57f98d4ce", "sighting--f9fca7c1-bacc-4932-9746-f0d9fea23041", "sighting--ecf78cbf-0a4c-4745-a40f-4a5c66a47595", "sighting--f98ee19c-49ae-47da-b552-afa7aa4cd5bd", "sighting--50228828-c1a2-48b0-a44d-152bdb6dae05", "sighting--9d8720a9-5ba6-46e2-835e-cc168ec6567b", "sighting--92bf109d-e97e-4b2c-b656-0d658167fbd6", "sighting--183b3241-5957-4311-9616-56ee66985369", "sighting--50f58e3f-779b-437e-9584-e39dbb45d268", "sighting--c10fb513-23c5-43b0-8b5a-3eed694fa4bd", "sighting--b1c71b8a-5386-4d8c-9a34-134455001f75", "sighting--a555a062-f4cc-4b6a-aca0-c93b2f3e7baa", "sighting--cbf9d4e8-90a5-4a18-b19c-822c5889aea8", "sighting--eb3e9d37-1b11-4e64-8122-5ac86b90a723", "sighting--b6ab4f39-5a37-4df8-874c-4137618551d9", "sighting--d14b1ea8-5394-413e-b604-e889f9b41bb4", "sighting--3f6003e0-78bf-40f4-8ecc-3dcd6d47f627", "sighting--0fe56c59-e54d-4604-93fa-40ad658c4622", "sighting--7605bcaf-c5f7-4cfb-b6f3-7f88d3c33953", "sighting--d97366a6-2667-4072-ac2f-e26f8cb22bfc", "sighting--3aba7f4b-fe1b-472a-b966-c564b89484c0", "sighting--601a8102-f59b-499b-b4e9-338a09f07dbd", "sighting--8e86c661-7251-490c-8f3a-bdfa9ab98f99", "sighting--84d3cd71-419d-4b3a-aa57-7f87b0da9663", "sighting--c0951b13-ad7d-4e80-97e6-d1e8d4e762e1", "sighting--1d99320c-18bb-4c1d-a053-b6a0e1bf88f9", "sighting--2c10b68b-233d-4ffe-909c-0e9f5ba537b2", "sighting--f6cb7d78-99ad-4798-9806-7e866dade78e", "sighting--24ec2992-85c4-4b41-a201-885bb9c531c7", "sighting--e57b0f1f-65ab-4e9a-8dbc-8c5efc8c1243", "sighting--c26cef32-e281-419f-b3af-d4875b1b5fff", "sighting--9d252e24-4eb5-4713-adff-498c6e67a654", "sighting--63468a7e-5234-49cd-b769-9cd573159bcd", "sighting--28810878-8bfe-4108-8124-ab8cae2f8544", "sighting--6eb182b5-88bc-4cbf-8205-8424f6898e98", "sighting--6f71c40a-5b3c-40f9-99c5-0133bada569b", "sighting--5d10f6a0-8460-434f-8416-fa273446290e", "sighting--3ab00b1f-dc60-4d99-a8d9-71a2480c4479", "sighting--c81fe8dd-59c3-44fe-80e9-5291bbcab709", "sighting--6207f2e7-fb39-4ad4-a335-159890c500c2", "sighting--ac1bae29-1a9e-435c-b02b-504b2add7cc3", "sighting--6794d031-47b6-46fa-b9bc-f2c32741eafb", "sighting--35652456-f6ee-46c1-8c5d-a45e65bbb945", "sighting--d55ab20e-7aed-4f29-9cf5-1a291685f0cc", "sighting--928bdf91-a5ea-4998-8bbb-2b275c9e491d", "sighting--8a848900-a351-45d2-b74d-517b7c8edaa1", "sighting--a528dd4c-af12-4aa7-982e-1b9659744046", "sighting--335fcc6c-d261-4be6-a258-a7c5ebd47b71", "sighting--80adfe53-db6f-4a95-96cc-39154aaad47e", "sighting--5a87a801-a27b-4595-b62d-d2b76e82de14", "sighting--53b13a8c-7fa0-4605-83cd-9d9cd50841b2", "sighting--fd468873-2eb9-4551-b71b-f1b6626664e3", "sighting--9cfe2db4-f62d-4632-bf0b-aaaacec81c4d", "sighting--ca3df335-2834-4cff-ab1d-025cb7550c05", "sighting--0ca32cb3-914c-4f1b-976a-f0e500638a95", "sighting--8bba7646-5a85-4a0a-a435-eaddbbe38254", "sighting--5f652f61-72e4-4672-ae27-010dbefac199", "sighting--ab078dfe-0213-4f43-ab27-b9298dc3878d", "sighting--de6dc4a2-d263-4065-b7d7-300827cecf2c", "sighting--2f2f6e91-cbd2-4e77-9d84-b3eaf9e2bf02", "sighting--cc4823a0-0257-4577-8b5a-68f389cacb50", "sighting--0cbc9dc7-1f56-4e25-ad0e-b62118428e28", "sighting--8db9d634-4fe3-4c0b-b0ba-277dea0d51ca", "sighting--423630fb-7819-4aaa-8620-990cb7551fce", "sighting--3c799a2a-7a08-469f-86b2-f9bc0f69b9c3", "sighting--103356e9-8857-451e-9cc8-ae7d070cb10c", "sighting--add95c1b-aee4-45ab-906b-af3576d30d4c", "sighting--05b3b78d-a4a1-483a-a665-601da7f4891d", "sighting--b2c2fb06-bed2-42d4-b4d9-6c880af94477", "sighting--604433e0-ef9d-4d80-a9b2-cc7ac06ce3a9", "sighting--50c664f1-efbe-4fdf-9ec2-adadc7ca0c42", "sighting--4132b6de-551c-4956-a3b9-3c9e77673c59", "sighting--3ed7fd6c-d4bd-457d-898c-e3c4df2e6b4d", "sighting--44bffbb7-fbdf-4b45-bab8-ac218574a7f9", "sighting--e97bb0ba-3ff1-45e7-b4e9-1644295d28df", "sighting--29165874-ab4d-49ec-9830-d97f7625bed7", "sighting--2ec40621-17c1-42a5-b45d-a0c4e1358d26", "sighting--034412e5-f53e-4adf-9899-9a97f714f10d", "sighting--e97b0da2-8cbb-4d1e-a9af-300b28761812", "sighting--676fadb1-cfc5-4c95-a4ce-385165b0e8ae", "sighting--972b92d1-7338-4ee5-b08d-d68497136822", "sighting--83f778c4-ed08-46ec-8f24-b61c44e2910a", "sighting--93b43ab9-f2f8-45f5-964c-6425df5a8772", "sighting--09adc462-1ee1-4122-afb1-4ab128f2fea8", "sighting--81054cd5-1898-4f95-ad40-12ac044c9624", "sighting--8279bb89-8f63-40f9-baba-0bb497e872cd", "sighting--becd54d0-1ad3-4719-9187-601a3f8c951c", "sighting--a15e7193-2c67-4625-a909-4bdcb7e04225", "sighting--b18cbc32-979d-4637-88e7-9696eceea682", "sighting--38f5353b-12c4-48ce-ac29-ec0ae1f45ffc", "sighting--7c432751-3bbe-4899-9426-5397d7da3744", "sighting--cd5e63c5-69ec-4aa4-b241-d3dcdbaa45f1", "sighting--61183db2-64f6-4375-833b-d4607ba14a43", "sighting--ac127f83-4f69-450f-a291-36fecdc83681", "sighting--ddea615b-a653-414e-a82c-d7c49d0980d6", "sighting--bc990ccf-bbe0-42dc-848c-253acdb30c68", "sighting--6520036c-773f-4ccd-b74d-68f91a7ea4ad", "sighting--1a1a7368-9868-410e-9f13-f80ac6397ac2", "sighting--50448d70-53b7-43a1-93ff-151c7ef21c9f", "sighting--9c08dea1-6468-47ad-b49d-9478a9d77bb5", "sighting--749a6e0e-b173-41aa-9dfd-5e64dda60386", "sighting--37b7041e-6123-4f9e-ac2e-b3dd0ebee9dd", "sighting--11614bff-2987-4020-9058-488528433868", "sighting--078621ba-8e5f-479f-b9cb-28ccd2f91b8d", "sighting--056913c7-b60a-4fe5-8e8e-6a1e070effdf", "sighting--0d0a04ce-beae-43fa-8d9b-85428f100df8", "sighting--8949f1ad-7ddd-4f84-880b-d43431f748d5", "sighting--a7323e22-1bec-4900-b8d3-0a336e91e902", "sighting--250c44c5-8920-4a6c-9493-d4de53b162cd", "sighting--e814773f-c834-41fd-92a9-4b6e4e5d2be8", "sighting--734f1f98-47ac-4583-a7e1-9dca587f766b", "sighting--a54726dd-2777-4f0c-8269-a5fd6da7a397", "sighting--2993c1b5-1194-4496-a80b-de230872d35d", "sighting--f3bd6eb9-6e38-4993-8556-b81691168120", "sighting--8a470748-0eb3-450b-b1da-dffa01a756a4", "sighting--847fb50e-9dc8-4db7-b6e8-7d17a76312c5", "sighting--a3a09166-51ca-4a90-98d5-49cdd534aadb", "sighting--26bdfcd4-c8c6-4261-a82e-8e921eec923e", "sighting--c6623650-0971-4bb6-abac-e86d3e5ffdc8", "sighting--29e6718d-fcc2-45ca-a9f9-72c17ee9232c", "sighting--61faeee5-3bc0-4322-9916-f4b8c0b11685", "sighting--4981c5d0-84c0-4e0b-8130-4f818407f40c", "sighting--d16aa150-32de-4411-af46-7704cac29631", "sighting--38eb0875-9e6e-433a-a8c4-5341f6e27357", "sighting--18ee9418-ead1-4234-86c4-359873c25334", "sighting--431848b7-7c21-4420-9b15-e748a3d271a5", "sighting--36896d31-82dd-4ab7-8a7f-fadb88cb65be", "sighting--9adf8f97-8bfe-4e66-9c3d-e860717bc05a", "sighting--26e8891e-7553-49eb-919c-6af7d6602399", "sighting--b5bd04b0-e7ae-4487-8655-5ebb41b8ee63", "sighting--ab81b48b-e1ed-4d52-84b3-b1fb4a046a45", "sighting--4f28e465-340a-4c9a-aac3-7d561e862d0f", "sighting--fc20655a-3c47-4579-8969-2da476d35b0f", "sighting--79e73842-8900-4e72-8dc8-515c561491a9", "sighting--de551082-c5de-4e92-90da-21f153d14d42", "sighting--9a36804e-a21e-4b83-b1a7-43c95e2bb807", "sighting--924188e7-1b93-49e2-9e9d-2e5fb5b24e4b", "sighting--6cdaf05d-a81d-4152-b126-5cb28321c322", "sighting--f93e07ef-2eb8-4b56-a229-d267e45098a5", "sighting--368fa4f5-11e5-48ce-bde6-cae5d9b7560b", "sighting--926a387e-358f-4500-a843-ed7f4342e073", "sighting--db609b47-f1d8-4ca5-80c1-e588a55f939b", "sighting--726015b6-f543-4277-8211-88385ed2bfab", "sighting--23e22e94-2b1b-437b-b665-a4c86ed9d993", "sighting--78d0c722-f670-4937-8764-b2f2f9bb0ed1", "sighting--b6ad418d-bc6e-4f7d-ad41-be4e5ab0f2b5", "sighting--300fc5b5-bcb3-4601-9fee-6b9f6809a153", "sighting--24737ab7-3ffb-4e82-8960-7349bf261325", "sighting--df4c2808-8399-4ee0-bd46-959c9a8ee31e", "sighting--5dd4ba79-1d9a-463c-a3e4-89226bfd6168", "sighting--9c877ff2-c80f-4575-9376-62d07867830f", "sighting--9f0b63d0-7c48-4691-8a74-be67ffda850a", "sighting--b144cf6c-e327-4244-8d3c-b5ae48d6783d", "sighting--4255eb21-615e-4f60-8cd6-5fd570517c6c", "sighting--23af6a8c-82de-459a-be3b-b077c2523c7f", "sighting--820fe4d5-f43e-4f0e-9dba-94deffde22a3", "sighting--2e921bd6-3b7d-4a04-be06-318114a6fc92", "sighting--6204e522-e03b-44a0-b9e6-08e124661109", "sighting--f7726bae-5dd4-4e1e-b09b-06c40445f093", "sighting--340ecd58-e523-469a-a079-a9bbca989f0d", "sighting--107f7146-d0b0-42c3-be44-755a8c7c32c2", "sighting--75190abe-9c6b-4127-9f85-7b6df2b09ed7", "sighting--9bb85aee-235d-4582-8479-105a18616772", "sighting--b6782565-ac6e-4413-8d60-783b43b7f30a", "sighting--31a0d773-83ca-4f96-84ef-aef7ab370626", "sighting--275c7892-5437-4b98-8f17-be4392ec5aaa", "sighting--16806145-aca9-4f7d-81c6-aac747d857b1", "sighting--ac6cf4cc-280c-4aeb-b4ee-9b3fe2206e4c", "sighting--f1ae79b7-de08-430b-b48f-eb09d3139c6f", "sighting--e382e11d-692b-4192-948a-6823bba87b66", "sighting--521e2c83-48e0-4ccd-9eda-0976105509c1", "sighting--656c7b32-a99d-4606-84f9-be18b0558580", "sighting--4d11d9af-c12b-4fdd-be4a-ffc61cd007cc", "sighting--6a99b8e4-350c-4fdd-b191-4a2bbc16b12f", "sighting--6d61b463-25ab-48d6-82ce-363c0f82dc53", "sighting--09bdbf37-4436-44ae-a1f2-f92ae3ecfaa1", "sighting--442bc35a-5e06-4714-99e1-9fc622648eee", "sighting--80ebd94a-b24d-48e3-b4d0-12b30ca51903", "sighting--8f67215e-c8ac-4bc1-b9d0-ef3668f854e0", "sighting--42b10b53-916e-4ea6-9c0a-5c66c2c0c889", "sighting--94ac486b-3745-4f48-836f-13a5826a8167", "sighting--abef9b7d-c548-48a5-8e34-5fe0343f02ca", "sighting--208af964-74d0-4313-a93d-558f328cadb7", "sighting--7b033c15-6c78-4c3c-bf90-19d1f92ddeb8", "sighting--2eaa7005-cf47-4f16-a80c-ba97026f978b", "sighting--b76a1486-04d3-4a6b-a615-c3a288a64548", "sighting--0a92a5c9-ca12-49da-aa6a-1a998c9387a1", "sighting--c4fbb0df-007d-458a-b865-c3e702a2d400", "sighting--ff3b75af-18ac-4a63-8d95-6745dd66060a", "sighting--9420b552-72ac-4828-8551-fd807c9df9f8", "sighting--d17e7e9d-c87e-4a60-b2da-85309cccc001", "sighting--003a8744-92e2-4c3e-ad62-6145621b0bd8", "sighting--f51e7af4-8714-4e65-99b6-ce0dbed6a30d", "sighting--1713101e-21fe-4426-b6d4-73eb5d76d6ef", "sighting--1880ecc5-0cd1-47d5-a7a0-10a2ec5f9b43", "sighting--594cf3bc-b267-4a8f-8ec8-ac00f5e503e3", "sighting--8e23c764-f8b4-47eb-9ea8-1f53b445e040", "sighting--292f35ef-0102-47ab-a060-6eadb0c1d983", "sighting--114c1590-c419-4947-88c2-cc5d968a841a", "sighting--6328be12-9541-452b-9c1e-2e9884ea0059", "sighting--40fa858d-5b69-4d14-9818-5e2c35e42fd3", "sighting--e6405686-31fa-48c8-b242-c80a844433fd", "sighting--64f0b7b7-eaf7-437a-bf9b-adfb92dc8c2b", "sighting--b3786672-46b7-412d-a685-dfb6c687f47b", "sighting--2be19e6f-33d3-41ed-8fbf-d70e37448f85", "sighting--ff422955-0ddd-4091-ba7b-08148a44ade7", "sighting--daf9859a-12e7-491a-91c7-bdb5575ef99e", "sighting--21293b80-a81e-4470-a320-95764decaf3c", "sighting--789eda1c-a0da-4082-a0e5-9e09a367ba51", "sighting--be9f7133-bce7-471b-bb4d-7dd04682ab1e", "sighting--e4895289-73fa-4c05-b714-61dd7a0b93f6", "sighting--905e98c6-9656-48d2-898a-021d16f84ed0", "sighting--be6d1436-6ebe-4160-9276-15ff198097fc", "sighting--395d9b52-9ab9-45d0-8229-9d1669b8c1a0", "sighting--b96a19ac-c0b0-4d47-bbab-2344d8469eb7", "sighting--3a97690c-36c8-4b23-8f88-e0b8fa58d2c8", "sighting--4e2c8311-02ad-45ad-a33e-dec74e100974", "sighting--46928415-e512-4442-b50b-bc2e0df56ac5", "sighting--dc43f9a6-23f8-4ab4-ad6e-e9ba18d32c21", "sighting--2c20fc6b-6a65-4161-8752-e8d85b043290", "sighting--16f03cce-80e6-4344-b8fa-8e27ec675a5f", "sighting--0151e3a6-555c-4226-be4b-7a80ec30231f", "sighting--f11314c6-7926-400a-a9f4-02bc918b7a21", "sighting--eee65393-0daa-4b13-9ec7-8df7b61d672b", "sighting--8af3ae79-b107-4d54-956a-cf50c9598d00", "sighting--6f9f82af-1f9b-4415-85fb-e0e3166ac109", "sighting--4d337e8f-839e-4894-b689-400d9f924f24", "sighting--4c534821-d0b2-4fd5-bf70-0ba068c33d50", "sighting--068e4bb2-3149-4662-8c4b-63efcc308d7f", "sighting--8655faee-b13b-4b82-a157-8a6891f2d20d", "sighting--bd8f22d8-a6fb-434e-8f73-abcda4888431", "sighting--d77f6f59-2ceb-4b15-b913-8cb53497ab81", "sighting--ed666e62-f43a-40c8-a859-73b2aecae8e0", "sighting--3989d5a3-861e-4175-b467-b83edab1f7b0", "sighting--e212d72e-d7e6-42d3-8482-eb5ec77b6ada", "sighting--a1950f40-029d-4376-b728-b654f49aec35", "sighting--0f9417e6-0df0-44d4-aedd-c92f0b2cc3f9", "sighting--f91ec6ee-e023-4a1b-8492-c53b1afd4c9e", "sighting--e4ad9405-80ae-45cf-aac0-c71c7745ef6a", "sighting--4eb2e2ff-6502-426e-bec4-59bb9f53843a", "sighting--da52d3e6-d23a-40a5-9e90-68b401c3590a", "sighting--7a561893-60f3-407b-95b9-b3655b92b765", "sighting--7235e741-1238-4f94-b4b9-255bee47ec7f", "sighting--35fca944-670c-44d6-92db-cb1f9fcd0782", "sighting--8c70c779-73b3-4944-9156-0d72aab66a7b", "sighting--bcda32b2-b323-488f-b8eb-db7d20543d13", "sighting--9f63f4a1-dcfc-44e2-be35-8bd80ffb8f26", "sighting--fce82c15-7e3a-403c-b2a1-c220cb288c4e", "sighting--19b0eb86-5214-40d5-8dae-28d5d1a1b17a", "sighting--208f0a0d-4705-427f-8c86-4c87ef33b067", "sighting--060133d0-8510-45ee-b9fa-6d207b264015", "sighting--74505a24-63d3-43ca-b754-b22e86704261", "sighting--2af77bb8-c114-4a8c-a590-1d75de62440d", "sighting--243dc8f0-83d4-41d7-aa28-6cb34ff0ec4d", "sighting--670b67dd-dda2-4308-9913-276d3f2dc22f", "sighting--01a08888-6c7b-45a1-9c23-82f2337297cc", "sighting--ccf4306c-f046-406e-9c8e-0a38017143b3", "sighting--407811cc-3fef-4230-851a-457c8da04cd5", "sighting--bf08171b-92ff-4d73-9b84-7bc6f3fa99f5", "sighting--50f820fa-74ea-40a5-b4d6-48d925bd7b79", "sighting--3320b001-c825-46d0-9dbf-4136c49b1922", "sighting--c623cd3c-f8b8-46e2-b47b-fc61641e29d6", "sighting--0cb65667-817a-44cf-9e2e-08cf0b53ee2d", "sighting--800a2571-0a18-4989-b3d5-a4badc670ebe", "sighting--ce2481c7-429c-4148-a595-a96365eb0697", "sighting--7d7a52ef-c6d5-44e4-a154-4efd65326564", "sighting--f688e6e3-a819-4455-80b0-9986c0f1b665", "sighting--df177180-bfba-4f32-895d-717e0bd8c08a", "sighting--df6e77f5-9dc4-4631-9290-0fdd00efaba7", "sighting--f547b53b-9fc2-4ab4-8f7a-822e8c1b36d6", "sighting--bb8e54d3-07f3-4438-8c36-9417ca5b8bb0", "sighting--3745bd02-4148-4a13-a828-24ddaa12c052", "sighting--77a6b7cf-0dc9-4b9f-8790-464091553980", "sighting--afc43b92-b696-4001-bc00-b7e35e1fcffe", "sighting--6141a0ee-df62-487c-b55c-293e5e1b6f77", "sighting--f0f1a0b7-01aa-435f-8358-aa097b4cca8c", "sighting--e8d3ab45-e342-4aaa-85fe-8121fa030a8a", "sighting--df9cce64-c66a-49ba-a1b3-68a6a35f49ff", "sighting--611e7573-042d-498e-9ef5-8ab57243ddc2", "sighting--3b5082b3-f02b-4c00-8f08-50a41689058d", "sighting--0d653711-8a95-4aeb-b058-24490eac0bd2", "sighting--aa6056be-a86c-43e3-a0d9-56bf37a0a0d6", "sighting--497ad5ef-ee3c-4306-8d77-78b07c06ce4f", "sighting--64c09eb3-1fa7-4f8f-b64b-5b4eccd1572c", "sighting--798801f5-43f7-4e48-8ef7-b3d6d446102d", "sighting--7d9d9d2c-1d79-45e8-836f-9c8ce62e40a0", "sighting--be0e99fe-ef15-4ef2-8af6-aa76fc4fbdde", "sighting--ed479dec-3bc7-499a-88d7-0766d2de898c", "sighting--c679528b-a5ca-4ec7-9a10-62cc02b3284a", "sighting--78fd5a6b-048a-4642-aecb-73d107893219", "sighting--4c90501b-9e51-423e-98cf-b87af2276197", "sighting--1c9e7487-4312-4f8f-9122-1d7db7aa5ae2", "sighting--42e7e3da-abfe-48e9-a2db-9c7110a8d753", "sighting--bd307236-373e-42b2-ad3c-3be790fbf568", "sighting--7e388976-a8b2-428d-9f96-96bbc3cc61e6", "sighting--46765ca7-7142-4dcf-8d97-fd09461d360d", "sighting--ed96013b-2dd1-4ceb-92ab-6ea756758c4c", "sighting--d056dd58-ca53-4211-9121-29de0d6376bd", "sighting--e36bec01-43cf-4548-bc9a-4dd7a18f55f7", "sighting--693e1673-8c52-4154-b0e1-8d8ea6035b11", "sighting--745a92f8-1187-4df4-b121-132d53465ed8", "sighting--82928f73-9a7e-4cd1-84a0-04cae1349192", "sighting--553f743a-99ef-4637-91ed-a6082e77e92f", "sighting--43b8b05d-1874-4307-941c-a2f8f098e18d", "sighting--4b7198ce-02fd-4b04-8b15-87a082c03e96", "sighting--10b6454f-9aa9-40af-8c6f-9e6cbd12f3aa", "sighting--2efe0606-4abe-409b-a80c-ebc72ddcfb63", "sighting--168cadc2-8d6a-4d4d-96d4-4764c1b4d3da", "sighting--a6b2a7af-b062-4901-8367-015d48a8b4fc", "sighting--3865d8bb-ae93-4a98-a80e-444f21fe5277", "sighting--8596e858-9628-4700-961b-68f964d3a5f2", "sighting--5d3d2384-7fc5-4fd5-ae5b-2710051ab72e", "sighting--ad8db672-7716-4443-8073-0b4080a73317", "sighting--0456b901-f0cb-42e2-b33c-d9c4e1f0fe72", "sighting--3b593e3e-48f5-462e-b1c8-d3ef6a91acae", "sighting--004620e0-a962-4e52-bc43-10a606b7620c", "sighting--a61921a1-089d-4eab-8372-9bbdf7f71967", "sighting--a109861a-8d63-4fb4-8f6c-99cb667a6a3e", "sighting--b16c7e3c-9f51-4be3-b4da-57ec75392704", "sighting--6d1803a0-b867-4a20-be6a-b86a2f426d01", "sighting--65c2b3b4-16be-4dab-a377-6cca7cc89c81", "sighting--ad1ae494-c29e-40a4-a546-5bd221966121", "sighting--67b645f4-6bb5-4ace-90c0-45c4b49bb0c8", "sighting--4c77456c-911d-404f-afd6-a218329fc812", "sighting--5da0c89a-f7ff-493c-b004-9418d1ab2151", "sighting--de35f0c9-8eba-47fe-b106-5543da0af7e3", "sighting--37c20319-d9c0-424f-b97b-125845136c5e", "sighting--58a1ad52-94f6-447b-b494-2489cda2b876", "sighting--c7b5d43a-c501-4864-9666-e347e68e5411", "sighting--46a72e6c-10f7-467b-843e-c3fd409be894", "sighting--bf3f2a98-3cb1-466c-91f5-512aa94d6502", "sighting--9857e0a3-d234-49cd-8e48-89c68b5d0de4", "sighting--770e774f-7bea-4ea9-be3e-94de14246c42", "sighting--13dcf23b-b0a1-43ae-964c-2534d485d9f2", "sighting--85b09be1-cf58-409e-bdef-285770f65b5b", "sighting--41f59cba-ce21-4fec-9599-4db23d552856", "sighting--bb22e99c-f644-48bb-a46d-da7902aa5ee3", "sighting--bcd8d1ad-2cad-41e2-aa76-f2966c1fd996", "sighting--fccfb1e6-be65-478c-a2a6-0867ce59c98e", "sighting--c92131b3-aaa6-4fc7-a6b0-3e387974d94b", "sighting--39eaf20e-7578-4989-af76-47ecf7d15d60", "sighting--837f8093-198c-4b72-a260-3f08834a72ca", "sighting--dd6a62b3-f28c-4359-bf6e-7edb3abb8f82", "sighting--09e28535-7cc2-4cdd-b6fe-55c85106e5a2", "sighting--1bd9efb1-bed2-435e-ac85-b289554b09da", "sighting--a9ffcd7b-cc25-4a70-beea-c8a670f1ffb1", "sighting--4a4cc96d-3abf-470a-902f-b938a3b9ace7", "sighting--d5d22356-9ea4-49c2-9dd6-e85aeac954e8", "sighting--bddf011e-4600-454f-8bf5-f560faccd2b1", "sighting--219373e8-5efc-461e-be6d-6701a7dc385c", "sighting--7b4d43e2-003a-4b09-9c61-6054a670409e", "sighting--db00cb27-0bba-438f-9a90-9d794badb5d4", "sighting--221f2095-86c8-40a3-ac4e-393e4881a060", "sighting--5c7f875d-35f3-4dbd-84cb-6d65da138f98", "sighting--f886e41d-bd14-4aa8-877c-f0e5d9aeff3b", "sighting--4ef0fca4-58cc-4589-8a9b-17acea319737", "sighting--b5cb45a3-da4d-48e4-bbf3-f995674fdc12", "sighting--0cf519da-c467-417c-8b0b-41b487f83be7", "sighting--93040752-2df8-40a5-905b-89c6cff277c1", "sighting--4ee6c3a7-f739-4cc2-8e2d-fa867098db5c", "sighting--da6c633e-4f83-4f2b-8f7d-37554031b9b1", "sighting--7e878bad-4936-4544-a5c4-8fb43784511d", "sighting--58d783cb-c9c3-4042-8395-aecd9a051fa2", "sighting--6ca78365-2661-44ca-9af4-3e6029b3f25b", "sighting--4046029a-42d7-4823-b39d-a957dd46964a", "sighting--aeb21124-f378-44eb-93e6-abef51e73d0f", "sighting--89726a4d-0bf3-4164-945d-937c748a7b4a", "sighting--f88fd709-efa8-4a95-93a9-9c5d1dce6113", "sighting--2ccb234d-23b2-45d6-b536-ac167b6db44e", "sighting--4a76e336-5b0d-4b9b-a380-c7bded4661b9", "sighting--bd58d79c-4b7a-4075-90a1-0f7916f87cde", "sighting--5073c655-23eb-4396-896d-69d9e9a071a9", "sighting--2dbc880c-f17d-4353-ae1f-a6c5bb958077", "sighting--9227dc69-a3d7-4393-ba46-5693492dd217", "sighting--da349986-1fe5-4db3-bdbc-64cb95d2395f", "sighting--ac4c62ee-8e16-43ae-8fca-14f8d4adfb4c", "sighting--26a0193e-86d0-4dab-b077-63e3f7c0fdbb", "sighting--49d9c5d0-d2aa-40e0-b774-28a2a0b9acf2", "sighting--ce9ae23a-286c-46f5-8726-ec32b65febac", "sighting--bfc15666-d582-4383-9e77-dbad15c4e5a6", "sighting--ee802ef5-9178-481c-8924-142be1a91144", "sighting--6e6b7c78-9f72-46d8-9c69-278e769ccf19", "sighting--5d089b93-6557-449d-96d4-cdec3095e033", "sighting--1a6873c2-846d-473f-98bb-d0a438c1db34", "sighting--7d8cd9cc-e290-4704-90a8-682b98fcbbf2", "sighting--f4e44134-be65-4241-bc6b-c45c7b1b8449", "sighting--c15c125e-e029-4169-a524-644a2ef77bcd", "sighting--d209cac1-d1f7-42f2-aef8-81a30908e374", "sighting--b6c6ed83-628a-427a-882e-c454cc78324a", "sighting--eca265a1-85cd-4e43-b925-b54648e3ac23", "sighting--bfcadc9b-0a0d-4a18-a1b2-65992b2b788a", "sighting--c34030af-a0aa-4bb8-8596-65f931b90f3a", "sighting--f3013024-1d73-48e4-8b9a-0026ce5da954", "sighting--d2732683-a00d-48c3-a75a-32b6110b6c2f", "sighting--7f3388b7-bff2-4138-9076-b65cd3eedd74", "sighting--9bc964be-507c-4e1b-b112-890d2c418b0a", "sighting--75bdf4a4-66dc-47d6-a541-3af478276880", "sighting--f6669e38-6207-4e73-89c1-319c8612843d", "sighting--607e0f61-2835-4dc1-b8ce-5463b942c741", "sighting--f20b9fc0-0101-428f-ab68-d33d36a4d138", "sighting--b9a55341-e5a8-4529-a749-47d7ad1a2723", "sighting--480e1ee2-2d92-4a75-8e47-2f14457928fe", "sighting--611a4855-10f6-4be9-9f53-2b3c829749c2", "sighting--79b0f934-1458-475f-a7d4-5d31586f8534", "sighting--d2d2b26a-5e47-46c8-91a5-4a750d808ef1", "sighting--960ba2c3-91ee-4241-8ea9-2633bb23dd25", "sighting--1259631d-a371-4f97-8a26-8881693c27a5", "sighting--e97e6b7b-9038-4dd7-9285-8a0d0d247443", "sighting--9b2bf547-30d5-4984-8eac-7cc32ce95c53", "sighting--9e787a83-b61a-4ede-ac30-6b77590367d9", "sighting--c637b2c3-8a7d-4512-885f-17f5a03a7540", "sighting--0f6dc172-1d91-4e80-aecc-f6c407ba6001", "sighting--31ccb65c-881a-4576-aa98-dfb63fec236f", "sighting--a15823b2-360b-4325-ac8f-e6bf92648500", "sighting--de682f0a-eae9-4f76-9d30-7c209da04396", "sighting--ea9540a9-4d18-4e35-a30b-c95b59fa543f", "sighting--e288730c-e354-447e-ab13-f2143bbd5bea", "sighting--8298842a-76c4-4eb3-bbba-f749a953bf6f", "sighting--92769183-07f2-4e87-90e0-39e8eeb9b905", "sighting--125e95df-a3bf-4e2e-a0a3-fe1ae515715e", "sighting--44fc326b-c38d-4038-b521-0598f66bb7d9", "sighting--365e568a-8593-48ab-ad39-ef238ac915e5", "sighting--ce6ec238-143c-4c8c-b767-a66968bb3c40", "sighting--c633cce8-7c1f-49db-b994-835c41bc6f04", "sighting--8745e1b0-8d76-49d0-b01e-3090ad2a3dea", "sighting--98e42d0e-ca41-4d42-b9c7-7cad11c33384", "sighting--972b8cb5-ea1e-4211-abca-bca23232f130", "sighting--a41a8735-0584-473e-a8db-b3e00c6b2dfa", "sighting--1d38f00e-938f-417b-a815-c5153a780037", "sighting--9d12e79f-6dfc-4bba-af14-60f9c06281f4", "sighting--ef6365b3-ddf1-4db2-b7f7-dab50dda3efb", "sighting--101a4b2b-879d-4b2e-904a-595d13b8e4f9", "sighting--a722adf5-ba9f-4005-9556-ca7f4872e6d9", "sighting--9a597b0c-e84f-4d11-aaa3-e56f512eadcb", "sighting--0447ef35-f4e1-48aa-b168-5ee9e5437d6a", "sighting--a7097652-23c8-4b83-b124-a3dea4906c85", "sighting--67e5815a-9215-4874-b71a-6407f8c026c3", "sighting--86d7d979-9677-48cf-8477-83ff4d647e6e", "sighting--a340151a-1aac-4961-bf0e-7198fe0a4561", "sighting--a6c38709-b34f-4501-92db-a41e59868333", "sighting--255290c5-fa92-42c1-8c9c-f8e4b207a597", "sighting--655cc85a-d7f8-40bd-8f36-f34bdbccd6a7", "sighting--9bf9845d-e1de-458c-af03-493fda3ef0ba", "sighting--8f8b5734-5522-431f-8843-45318f3a8629", "sighting--86d618d5-e1b0-473a-91ba-4dea23037e5a", "sighting--2c511792-a06e-4a11-a9f4-8f7a2a18856d", "sighting--2296b0f5-36e6-412b-bed2-6d8ea22bd875", "sighting--9f213887-5413-4b95-aaa0-3038510c432a", "sighting--c34f1c49-eccc-4c8f-b423-7b73c29d3b39", "sighting--368b8836-4444-4df2-b825-ce797adf5e45", "sighting--1a91902f-1316-4fbc-bbd4-2214650858a3", "sighting--aa426086-baa2-4705-96f5-d755efceecde", "sighting--6e5c9fa7-a605-4dc1-9dcf-4df89dec5a2d", "sighting--1547aa4d-d46f-430b-9538-0adca21ca4e9", "sighting--857bfd53-c370-48f3-8a6f-6be02dd5e766", "sighting--36f1bacc-0d66-43c1-8fec-0f72d40525f2", "sighting--d534fe6b-c1e0-4023-8ad8-81b06af91ff2", "sighting--fd1284f7-acbd-4e07-8ea6-e3d3ece3b305", "sighting--0f0a4e40-d3a2-4911-a3f7-71b2d1540a50", "sighting--7c98033f-c4ce-488f-b3e2-02a4f75e907a", "sighting--1a891d0c-93d6-4d97-b3ad-2d3072d67abc", "sighting--2769d2b9-1093-4c0c-af78-723fd8eda819", "sighting--2f17196b-0b4c-45a8-8f0b-cb8457c41eb1", "sighting--376417ef-73e5-4140-a796-07298fe968af", "sighting--b91b64e7-553a-4116-ade4-1927cc0706aa", "sighting--77e6dcdc-79a8-4fa9-84cf-e44c3b5e1218", "sighting--4009a521-b8c5-4786-be0a-f00efbcbd6dd", "sighting--0e67ac46-c11f-4ac6-b74b-fc275006d932", "sighting--d65ec549-603e-4c0e-8624-c459e37cf192", "sighting--067475a3-2ceb-4ade-838a-8abe0d5dd2cc", "sighting--c2437f8b-874a-4dd1-908f-b86452754c57", "sighting--74c3a4de-6523-4349-b316-c481eee2d5ed", "sighting--376b9f78-a433-4492-b9c0-5a0a45fc0537", "sighting--1227703e-57d6-4eaf-aa54-81152f2bd5cf", "sighting--a831c997-7718-4a97-a547-5f360fb0375c", "sighting--5d8818bc-783c-4fc4-a13f-0a1d8c15e396", "sighting--7930688f-747c-4836-89cb-63588ff24cce", "sighting--f60d24a8-cc01-4727-966f-fa97541d740a", "sighting--ea59d64f-b23b-471b-a3a8-0a7578696e5e", "sighting--bf060838-33d7-4138-938c-5238439a5386", "sighting--54aac669-5102-42ef-92c5-e1c7663ce532", "sighting--aea43a5f-d955-4552-82fe-6e5ec09b6752", "sighting--a3bd5dcd-0557-4177-9793-fc56ffd56b3d", "sighting--26f4658b-2c6f-4974-9c28-3f8bcfde7068", "sighting--cbed2a80-0ac4-4e55-8a23-01e68646605e", "sighting--6eeb2097-916a-478f-be80-71aead10f51f", "sighting--cd58b5f5-dfea-48ed-a71f-9b29811ea73f", "sighting--8e9bdd23-cc53-44e0-a967-2b3c75adabc6", "sighting--56b8878e-e6ad-4a1c-b6d1-0b3f19c918e0", "sighting--46b64a14-8b5d-4a15-9b3a-efd2a7aec54f", "sighting--d0db073b-2a17-49b0-81d4-f6fc99d583dc", "sighting--e3bda0fd-b6ec-423a-a244-549668228274", "sighting--37998e0c-33ba-4afa-9a7b-f16a9fcbeefc", "sighting--cde33e14-0914-4756-93a6-e817db1690b5", "sighting--0dfa24a2-bbc3-4f5b-96e6-3e4f0ad9e0b1", "sighting--5dee83eb-6033-4a21-99c8-264b4f8935c5", "sighting--ff2e9538-6cf7-40fd-be44-3a9ac0f85743", "sighting--f2ff9c5c-dc0b-4d5e-a517-34ca10b334b0", "sighting--ce14ff44-b2fb-4da2-a0bc-262ce03f2de2", "sighting--ce42ecea-10d0-42b7-a803-a475c45cbe2e", "sighting--2057694e-39ae-4507-954e-15ef37e661b3", "sighting--b4d376a0-d43d-4472-8204-072cbc4a9e8b", "sighting--28a10d6c-348b-43f4-9433-a039f0430f4c", "sighting--d6b08837-f712-43c2-9797-fcffdccbe066", "sighting--0c41c531-bd7a-4f0c-b1e3-2c72bcdf1690", "sighting--ebb8e75c-0c29-429b-b02d-40ac67878976", "sighting--943773b3-837e-4859-987c-3a9fc8840659", "sighting--dfbc1766-eb4b-47a1-8a3f-6c74798ce604", "sighting--897d9284-941d-4151-bebf-1d795b1527ee", "sighting--8e2429b3-9e2b-4cd4-bf2b-a8f62189eeda", "sighting--e8f93ed1-01cb-4256-9b11-ea03befaa532", "sighting--13441d1e-e6da-4e5c-9f91-c379e77f9af2", "sighting--e61a0c9a-079a-44a5-b829-840c451ffc85", "sighting--3d638fd2-a834-47c1-ac9a-f82704efa7c1", "sighting--1cb71635-f746-4a97-aa7f-83405f9a1242", "sighting--584f0f93-5eb1-45da-b260-2e19a95d96ab", "sighting--309192b3-6224-4faa-b5e3-0002334a346d", "sighting--3c53a2a0-8e56-476f-985a-0dffd5b3ce2c", "sighting--bce55ea2-6b7b-4802-ab1f-b818ed974985", "sighting--186c8664-da4a-4acc-927e-f1f0e4f41cef", "sighting--599b87db-e19f-40e4-aa10-9933b6b35baa", "sighting--241eea78-ba3c-41b4-8e53-43fbedb2c34e", "sighting--b3c6429f-d810-4a09-9e73-f70fb241bc89", "sighting--5068816c-d5bf-4ec9-a890-d4f20a10d40d", "sighting--c3efe81d-cbcb-4cfd-83be-ac965e36e213", "sighting--04d82675-a845-4b3d-919a-a0691392e679", "sighting--7a3985f7-ecc5-4368-94e6-e6fb3f25fcd0", "sighting--59dd82c7-fee5-4ce2-a478-ea8ce3a2261c", "sighting--2ebe51b7-394f-442e-a05c-6901751bdcf7", "sighting--6ad0bbb7-5c2b-41c1-afb2-4c26f5a639d0", "sighting--935fa364-943e-496a-a58f-075223001614", "sighting--db3b97bd-321a-4bf1-9caf-adaaaa5d3323", "sighting--be5c18c1-8bfa-4157-9b55-6d0cb045a487", "sighting--50e4e396-eef9-4a47-9933-1f55008a0b21", "sighting--3128abb7-0aa2-4da4-89a3-00c570a7c682", "sighting--75f918e8-eceb-49e8-8c75-d0958fa86940", "sighting--f67711fd-2061-48b1-be79-e18ab2967c27", "sighting--4a2de21a-ec2a-44c6-9530-764fb6cc3559", "sighting--8ce6d55e-7054-4137-a5da-b2496f7bf589", "sighting--69da9aa0-d97c-4241-9369-8d24979b6b3e", "sighting--6c91647e-8d39-4ead-b95d-0f3b702c79ed", "sighting--6aed5a4c-a983-44a3-9c72-0e0f595ab496", "sighting--a2474097-e0fa-48d7-9b91-1bc13f98fa7c", "sighting--ac1f5b62-72b4-4a73-b24e-d26209d6bc64", "sighting--56ddf6f3-b966-4bdf-8ba1-f0ac46a95ffd", "sighting--82ac8f45-2a21-4b71-b081-f4da16a16494", "sighting--96520ea2-26c4-4a91-9eb7-a904313a4f97", "sighting--a3c80def-2100-443c-82dd-743505dcecec", "sighting--e5d6dd0d-5add-470c-8e26-2574f30d0e31", "sighting--49f7a582-5be4-494b-b688-2c3768d450e2", "sighting--12901846-707c-405c-8be8-da7b4bb70506", "sighting--6fb8e79b-e393-4e45-b0f9-539ea2ef0b0b", "sighting--bef6f5b0-4c08-48f5-83b2-9f400d912f9a", "sighting--f372aa4f-90aa-4fd6-9128-891b60e96dd3", "sighting--b6c16748-035b-4162-97bc-0cb420b45b1b", "sighting--01babf78-fe66-42aa-ac89-1e7f17c4ddc4", "sighting--22ec632a-3ab6-484a-acf9-03dc3b2e62cd", "sighting--b14cf000-172f-4a81-b78c-15654e8e115d", "sighting--d5bf8f2b-f5c5-4cfe-9370-0d88da24279d", "sighting--d851ef3f-7861-4433-9238-d98f254bf6bc", "sighting--916a1f3c-b56e-47d4-afc0-aaef8d0b9f37", "sighting--b74835a7-15a0-427b-b095-0477d6cf7b96", "sighting--38c49105-4df8-4556-8d50-436ef1eb49b7", "sighting--c42835a5-c3ab-4a7f-b5b1-ff6e886c7fa8", "sighting--5910d499-5147-4210-85cf-3bbc7103fbf5", "sighting--854cf0b9-4bfa-4cc6-a56c-90d639519e5a", "sighting--2f0126a9-e285-4a19-bb8d-83fb2b8f8bfe", "sighting--5a0250c3-3558-4f7c-97d0-a95b128bfbca", "sighting--0e96aaa4-b343-41c2-8610-2fed74823a00", "sighting--acada7cc-0457-4e2d-bd23-7e36743d0d9f", "sighting--d9997ce0-b689-47d1-9e54-6df053a7023e", "sighting--e464118d-de11-40cf-bcf1-5c4201d73687", "sighting--f75f8ac8-131f-406f-bad5-91dc6348000a", "sighting--96a77b48-8a6f-4579-9757-a7ecd88a56e0", "sighting--f85a7c0d-5a6b-4784-b5a8-357f5efd3ee8", "sighting--819a2444-4bde-4403-a55d-9b4335619ebd", "sighting--e3b8dbaa-ea4b-4444-ad65-0f6a7c7909d9", "sighting--10645480-a799-4ed0-b19a-a125e08de772", "sighting--30a84aef-8523-46b2-b215-751430478f77", "sighting--17550d46-f095-4fc9-94ef-a9143832f1c1", "sighting--575b4a3f-41a8-480d-b597-97d6bb53cb83", "sighting--7ef0b32c-ad6e-4a45-972f-70823b6bcde1", "sighting--a16248ab-424a-4a8d-9068-1cd2d2ceba0d", "sighting--cd5efa99-6069-4c68-941d-c19f8ddeff5f", "sighting--f1917088-cd8a-4885-b1af-c2f7c8256b96", "sighting--91471dee-55a9-4bf7-b3a2-6799198e74ae", "sighting--da591599-d83c-4d2f-92bb-0eb4306c19b0", "sighting--4bc0a445-39ed-407a-82cd-29c9eb91101e", "sighting--2ccba804-77c7-43c8-bf6a-af0c2704dccd", "sighting--bd573318-dcdc-42df-bf5f-b0d394a5c9a3", "sighting--9d60f185-3c20-4e6c-8893-7a02ad7856f8", "sighting--d776c407-5a02-4d08-9b4e-c17becc1d9ce", "sighting--91286f2a-5854-4cae-9d5e-9d02be041c0a", "sighting--64febbfc-6c93-4aa6-8c55-d3b7078bcfe4", "sighting--2affe0c5-ce65-44fa-8576-25b60ea5036f", "sighting--2d13fa91-1ad8-43fc-8c23-2c550c6be88a", "sighting--65bca334-19f5-44fe-9d3b-dd6cb8762349", "sighting--b8651d9c-cd9e-4a0b-a98b-19b71a13d086", "sighting--4df12c20-f5da-45fc-8f28-acea04b93d19", "sighting--137ea803-e5bc-4529-8b2f-71240c29619b", "sighting--9f9cbba0-5994-476b-a8d0-ecba36f8e9a5", "sighting--95deaf68-1e32-4d5a-9ce6-f8821ab471e3", "sighting--28ed77a0-ab8e-4279-b5fe-a33bbc04b64a", "sighting--2e13f4c6-1393-4c61-bc83-b48dd865de2e", "sighting--e41209da-aa7c-483d-8d95-aa2b0952f722", "sighting--e6c82f72-c2b9-432a-b66f-868a66194ea0", "sighting--8679ae74-9932-4448-86d0-40abded76a26", "sighting--02b3d7d5-8e78-4ba5-816a-987464ba8e5b", "sighting--4b1d2fe0-2cca-4818-bc0e-d3777c2f35ec", "sighting--5441474e-9bc7-4cb2-9da4-6bf69fbd7e55", "sighting--5cba94d0-f3cc-4db7-b9b3-a11a9aec0fe1", "sighting--7e0345f9-e221-48d2-9e27-71e600251b8b", "sighting--10d78c1f-e1d1-4664-acd9-7412abaaeb77", "sighting--42bbb441-0ddb-46f8-8c8c-7122b147e236", "sighting--33d0789c-d689-473b-8988-2819816f72e9", "sighting--03189a3a-0c19-4b1e-a759-08f3d1383b7f", "sighting--68b12a7c-2405-4b95-9925-ddbad3c1ff2d", "sighting--57b6f78b-30d6-4801-88ca-3ed20614ee4d", "sighting--eb6ea331-a699-4c0e-800f-95bcf170e9b6", "sighting--422791c9-6a29-4e16-9b7f-969574477e73", "sighting--a358e740-3c73-4345-84a5-e3d49e70eb94", "sighting--e3e303d2-b396-44ee-aa72-e2cf44070407", "sighting--a4cc02f7-0eed-4000-9bef-03309e19ff8b", "sighting--e73d7ed2-2086-4b58-9520-b0c6fa6b2c1e", "sighting--9fceef9e-903a-487b-af7a-f7224581cd97", "sighting--0c026a4c-ae2e-4828-a6f3-fba14de63958", "sighting--c5feaeee-311f-4acd-9fea-95a6a2c742e2", "sighting--dcdf6559-61cd-4b90-803f-86ae61b91d96", "sighting--98dd1a07-8de6-403d-baad-fc7637603a49", "sighting--69d92ed9-f206-4c95-9fa4-05231093e700", "sighting--d1e7290c-3cab-483c-bd13-e2bc23a682be", "sighting--00ca8ba8-f844-4cdf-9032-bfdb1d9de8ca", "sighting--226501bf-77f6-408a-9ccb-3372d3696db1", "sighting--2486e772-a80e-42d3-baad-c7a15abc9e5a", "sighting--403c899f-4fbc-4abe-893f-af71f26a0367", "sighting--31752b46-66f0-408e-9a0f-67d3be7f9b11", "sighting--d4bd89cf-8a4e-4482-a1ba-fbe0cc92a0cd", "sighting--88f9b425-d090-4462-ac29-ba6f831d599c", "sighting--1ff4ee70-948e-4109-a59a-25d37bd981c5", "sighting--2cf62181-9b49-48ce-9fcd-40f4e3798b55", "sighting--e88537b1-2d16-42b5-8669-ccf8daf46884", "sighting--668a2e29-1318-49e1-89bc-c0aabdcf375c", "sighting--4175ea50-43cb-4c67-a235-57337b35aeb6", "sighting--e2c386b8-34a0-4663-9377-6471dedac8e5", "sighting--77638594-e130-423d-92e4-3c038be7e061", "sighting--7627fab5-da78-45d6-a1ef-948b85e26b8a", "sighting--58a2fa3e-dcc6-4966-843b-63b12626964b", "sighting--430609c1-aa27-4dcb-9736-8434bfd0654a", "sighting--b9529f07-e7f9-439f-80ba-fd9095505fe5", "sighting--c5f19b37-4c61-4a63-981c-155f28411f11", "sighting--1debc237-5e83-4048-9ae9-a88a623ecfe7", "sighting--8dbd5a17-9c73-4685-b913-9983ed71a3df", "sighting--01b00044-1ff8-48a6-8862-a7d5c453a4a4", "sighting--5b86270c-03bb-4127-b8b1-12ca0b1305a6", "sighting--9d54a9ab-d169-4af5-b232-8f9995cc794b", "sighting--7d9b0ede-5bd1-4ffa-aac6-52841e26ef1d", "sighting--7a6b6be9-3563-411e-9fad-c18c03fd58f9", "sighting--885b1fb5-bf25-40da-bfd8-5db3134b2e0c", "sighting--6373f40c-2ff0-4a78-8db1-07c7f90ced88", "sighting--cd4f252c-7064-4b32-9ffa-7b6e16ae2a2c", "sighting--a39d55ec-c681-4968-ac92-0f089bca4d0d", "sighting--715f81ec-8ab2-4ac6-b427-2d91502ee184", "sighting--b457010c-ab7a-4dcd-9877-e2f1aec0f598", "sighting--01e135f4-77b2-41fb-a789-fb9ba3c87ea0", "sighting--1ef57a6d-4efe-4078-9a76-0f7dd6b6c1c4", "sighting--9bb7c906-4693-4060-b62a-83b020e3a925", "sighting--f604129a-2e0a-4210-97bb-b0e3123735cd", "sighting--e4ec61aa-2207-4567-9296-ebc9bea26c18", "sighting--f45a7227-2c20-427e-a3af-5a61a2c50043", "sighting--b3c8a803-c500-4bbd-b956-eab266b93c7b", "sighting--575b12bb-b119-4a4a-8f09-373d7548fa18", "sighting--5605a470-581f-4fb4-964f-3278569d9d96", "sighting--15465662-0ba6-4ed0-b5f1-507464a61861", "sighting--d71ec4ad-502c-4bf7-8e95-2a106d6fd044", "sighting--13414930-10d7-410b-aaad-1349664599d9", "sighting--acff955c-ce0c-418a-be06-3abc0052fe3c", "sighting--3b3a294f-3afa-486a-8945-1c4acf9856d3", "sighting--a5ece753-5332-4774-9617-d5f6b1b5192e", "sighting--b36ac358-0548-46f3-bdea-7a128464d799", "sighting--de03f361-5462-4e04-8ea8-8047b221814c", "sighting--713cc175-511c-49a3-bd0a-0f751adec351", "sighting--29e67753-b6b0-4740-9402-716537b1fab4", "sighting--e6c2a651-2d81-4305-8b2e-9e0188787c8a", "sighting--d3dcbf70-b55c-4bf8-a945-32ccbc257fef", "sighting--5771be60-fc47-4e12-94e2-060ee8f5d24c", "sighting--ccf830c8-5f84-4db0-88c0-4e0fc9c9b25b", "sighting--2156a4a3-5de5-43e6-8310-e111633ff927", "sighting--9d4cd6d9-3078-4752-bd6b-dff7f2b62a32", "sighting--5a4969ec-136c-488b-887e-93512f5ce415", "sighting--ee73f936-e6c5-41e4-8f46-9817d5c755cd", "sighting--49734be4-3730-4111-a245-24d711f3ddb7", "sighting--51a75722-c2eb-4466-85c9-8bf81b062356", "sighting--3149b616-e9fd-44bc-9886-3a611a975d2f", "sighting--905f001c-ffab-4840-97cc-6df245ed56aa", "sighting--96608192-a31a-42c2-b7a1-068f63252bfd", "sighting--d5cec672-490f-438a-9fce-7e4ff5662203", "sighting--1abc9fa6-98de-413c-a67b-ef3e260c3e89", "sighting--88e3a9a4-e133-4d9e-a38e-f0b9ad8a54c7", "sighting--76504d55-cc0f-4a2c-a6de-d03cefc55b76", "sighting--04382a8f-1e44-4bf0-b4e3-cd7f5efcf791", "sighting--63207508-9691-4468-ba9f-3ac01a1ebd6a", "sighting--5c2181c5-3746-45f6-b476-0bfdb5dba70b", "sighting--ff9aa77b-417a-41b7-96dd-6d87131bab73", "sighting--7e960069-5557-498b-8496-e8f6b19c2e4c", "sighting--fc1c589e-0b14-40ed-9cce-3f6ef83abdf6", "sighting--3c78559f-4ab8-4eae-8a2a-f320832ace15", "sighting--8a129b02-5ee0-4b6c-be14-221fa72707d3", "sighting--7e662d41-67c3-498c-ad37-8385699070f1", "sighting--ef14a73c-0b28-4197-9c82-1d06692da704", "sighting--1cf44076-eeeb-4a71-8644-b5f76bca1ab4", "sighting--9873eba9-bcf6-4069-b303-259c1e9907e8", "sighting--3d49a109-7146-4b25-a2a9-00e75abea4f7", "sighting--f5649b2c-4a7e-4c90-8871-d046d6c093d7", "sighting--4a9145d1-77bd-4588-aee6-fd5989504207", "sighting--83e75273-ce29-4ce5-82c2-997c45570f6e", "sighting--771b60a3-4891-4939-b08a-a14257014ab0", "sighting--ff1580a7-3df8-424e-b532-c2e989d96716", "sighting--00296185-6b8f-427e-b16b-03b18f13ae4c", "sighting--5d87ab88-5221-4ddf-be6c-ced8aa2cb5e6", "sighting--e9a6c213-cddb-4a18-91b4-84c8c9911285", "sighting--b5334d71-9eff-408c-b461-9f46b06a5769", "sighting--b48d3fa5-1d05-4633-838b-f692a2ed225f", "sighting--244649a0-55a7-4cfb-b1a6-02da18d351b3", "sighting--9791fb69-136d-48b5-9ba0-3387b3bee92b", "sighting--2eaa9f2b-e88f-4409-87f5-3374c6c70736", "sighting--f4a9dc8e-373b-4dc1-8ee5-98d58aee6ab9", "sighting--8a1de1d2-8176-4f4d-8c98-b9687adaa75a", "sighting--cc9be8a8-ab73-4147-94c8-4bc100209663", "sighting--038d7f9c-24e9-4abb-8434-f692d5dc2524", "sighting--76d2aab1-bd32-4a19-81b7-0be4a12941d3", "sighting--f23d5eb8-cc4b-4156-b363-31bbe29c985c", "sighting--6d00c475-9e46-44f0-9987-fe761e2ce496", "sighting--829e3580-b5df-4790-971d-872d35ee57c0", "sighting--ce7b171b-c9b5-4304-80ef-8b66f14fce1a", "sighting--fe291faf-448c-4867-8d5b-143472337431", "sighting--6cc77790-26b0-4e1b-89bb-ce67ece541b7", "sighting--38eba144-3ae1-491b-bb94-16484fcbcb65", "sighting--ec18c526-e3a2-40cc-85bf-ec00d3f2f48f", "sighting--64e86f9c-b5ac-4176-940d-336295855717", "sighting--d650c0bf-2ed8-41ec-861d-b0b9fee09ca1", "sighting--d8d7dd75-f4c1-4396-b2b7-887276376743", "sighting--df0127fe-1f4b-4749-bec6-bedc80ae6193", "sighting--ba1047c4-1a45-4070-afa5-e8354fd2b0c3", "sighting--1e8c4aa0-c1e8-41c4-850b-36d8b4612111", "sighting--d3eaf00c-ec6c-49a9-b7f8-c34cd757f7a4", "sighting--5bd28935-1566-4ad3-b6fa-9d00268e8cd0", "sighting--2df4e293-26d0-4489-a0af-59fb52a804ee", "sighting--57219b9f-194c-4288-b8de-d733e3f2253c", "sighting--f998b014-850e-4542-b7f0-03d123956ca9", "sighting--43b9897f-2b26-4d18-91ea-84e0415d8a69", "sighting--956f0fa9-ce70-450c-936b-cfe90857aa4c", "sighting--80c35e38-dc91-42a8-a164-58700a884051", "sighting--6199dcbd-afa3-4e28-8a5d-27a864b10271", "sighting--83a5a6c4-1bae-4708-a15a-90628d6c57fd", "sighting--152f3fb1-3350-43a6-887f-174c9aceacbd", "sighting--3e266df3-add4-4917-99c1-aeb9704dff4e", "sighting--2cfacee3-f5bc-42dd-96ee-1ddb8bdc4868", "sighting--56a9be19-d35b-4943-9957-a429d6eaae83", "sighting--e8c66035-e3b5-461d-8cf6-4ab9f17d288c", "sighting--17c31e8f-6db1-4cd5-8c4e-34130c793b6f", "sighting--bd6f78be-3ed7-4985-b1d1-04eb9e0f8a75", "sighting--2d286380-2381-414c-b35d-22ca66c764ea", "sighting--23e0323d-388b-46fb-bb2f-c83b07b315a5", "sighting--31a62acf-2645-47c3-afd3-408b3e705205", "sighting--97a2f03f-db85-4cc2-9c3e-ccc4e702c1bf", "sighting--0304cda3-3a14-47b4-97ae-9f97d5507234", "sighting--f2e58108-599e-4f85-bf85-e283d5c6bb20", "sighting--8306b72a-e864-4643-aa23-7bb9099db950", "sighting--cb30e773-5de6-4826-bb5c-468927117dd7", "sighting--30afa063-b189-4e6a-95d5-71ec35453d59", "sighting--f542b75b-2a7a-4f14-a1f1-8f8e4dd9ae8e", "sighting--63134e06-9521-4136-b560-adf868177d33", "sighting--90643422-7e96-4e63-bb64-935243f163e9", "sighting--df1f4c9b-11c9-44f5-8ad7-71abaf51750b", "sighting--bf65b3cb-b199-4f9d-a2fa-b6855d7f3412", "sighting--a2a3cb56-e33d-4ed2-834a-7d240c2edff4", "sighting--721b49d8-16f4-4eee-81f2-a5a559e9cbb3", "sighting--fb66251d-4917-43f9-99e5-9562d99dab6b", "sighting--37502ace-83a2-47fc-9085-7b4582b38cf2", "sighting--6f839390-294a-41dd-8b92-5dec00e23add", "sighting--9afd96d3-0c2f-4a73-95d2-5dea5c704e55", "sighting--559a981a-d178-4700-95f7-d07329d5fabb", "sighting--54e0dd65-da57-4d4b-8eb7-5bbc9f178ca3", "sighting--1a3eda58-2727-4db3-b87b-3118ad60ff85", "sighting--bf7dfb0b-eb4e-452a-98ab-5d911e974f7d", "sighting--2c04e8d1-b468-4994-9bf1-5d39d1508f9d", "sighting--d31936e2-8b9f-4fe0-8606-21b79323aaa0", "sighting--3bb82ea6-3267-4c2e-b6c5-ea2d7daf31c6", "sighting--189adc3b-8362-4d34-9182-4c869607078e", "sighting--e6020c2f-e959-4a06-9969-9ec280ff958a", "sighting--42652253-9e09-4988-81db-1b2a0e638de4", "sighting--2a45a008-e0b4-4844-8244-f7fcfd65c0d1", "sighting--22897488-daba-48e3-a527-044348268c70", "sighting--40e75b0b-3713-4bb2-bd29-69a3b0ec4e8c", "sighting--4386fed4-8b82-4ecc-bc8a-33a8c625231d", "sighting--f40d9fa4-acb2-42c8-b3ee-f4052f60e512", "sighting--52c95eb4-c64b-48ab-8b03-af80377ca482", "sighting--e7a1b0a7-0d70-4b6a-a16a-534f4df1df56", "sighting--f9dc3912-69a4-4198-bcdd-86e50a83f612", "sighting--470561e0-7082-4990-853d-f2b97095aebd", "sighting--e16e7d31-d1cd-4a23-90e4-d47391f0cded", "sighting--c7d96a34-2f34-4fda-9d65-65910db281d3", "sighting--e9d5a172-e9f5-46b9-8a3f-0d672adcec4f", "sighting--c1e07309-3c91-47aa-83a8-ed16dfeeb77e", "sighting--ffb3f598-7847-478e-835e-93511dc1803c", "sighting--08f0410f-e52e-4823-bd45-d6cc637b1a21", "sighting--3b797b8e-8e07-4251-98f7-ec6f7b6f3109", "sighting--574f6160-af97-447c-9e40-ba1679b71a12", "sighting--f0c87975-fd87-4112-8f37-be5c1bf2a5e8", "sighting--b28e2ed0-fd03-4d0e-9f40-cb2c0516590e", "sighting--e8cffcef-a0cc-4099-af97-3b45a24d9585", "sighting--06285c19-df50-4eb6-8553-7d4eb438f7ab", "sighting--8bf14ec7-fb66-4075-9e9b-e0effc7f269b", "sighting--a447ef1d-71ab-4bd8-89a3-fe8d3890b05f", "sighting--209e2156-47a8-4520-b328-047e0df80bf4", "sighting--0fd654d9-12e2-4115-8f85-4ff559f03011", "sighting--30dacff6-bf4d-43d0-ae9a-7e2a235c09b1", "sighting--668eb7f7-f182-41d9-9ead-ef633fd817a5", "sighting--bf2218c7-98db-4b8c-8c1e-268b11928a8a", "sighting--408f52e9-25d8-4f3e-adfd-2ba9419b6266", "sighting--8ccad381-b8ae-4c95-826e-58da31e8d29c", "sighting--c8bd3fb4-4167-456e-87dd-d6e7cb798825", "sighting--a87c7e27-53d9-45ab-a1ad-d04adfe4f382", "sighting--2e2cf369-5291-4705-afb9-0a0cca376994", "sighting--1b881d55-d623-4b8f-b69f-46dff84b89ad", "sighting--f0cf4586-efd1-41d2-a521-42655e3807aa", "sighting--da147f66-e4ba-404b-a1d2-1d8dd9f06a27", "sighting--ebc87159-441f-43ce-a0e3-f5f65e1f0aea", "sighting--a14824a5-8aab-439e-b0e7-93799a260784", "sighting--cddd19e1-fa1f-4be0-bc5d-91f7d77d03be", "sighting--2bcbdf5a-ce24-449f-b063-27944b29b2fb", "sighting--bbed664b-cfba-4241-aefd-ce4986eafa0f", "sighting--52827447-9cc4-4725-a571-6ff9f7cbbb6b", "sighting--cba64456-830e-4633-9f8f-db4732e6518a", "sighting--112656aa-44a6-47a8-8f06-d789ba7c36ca", "sighting--8718d800-b895-4e42-8281-01378f2fe10b", "sighting--dac37180-b2cd-454e-ba95-3bfa2cecd290", "sighting--82aefc55-4ab0-4117-bd89-417afab39ab4", "sighting--985fc01f-cb2f-49fe-80da-1051cf2d2dc4", "sighting--953c9e88-ddc1-4cdf-8157-0777ad67bc22", "sighting--f625c1df-aec7-4fbe-9dec-a719cc30c58d", "sighting--82e9db74-b5b5-4a1b-8668-2cf6293d3a33", "sighting--286b42f5-d962-459f-9576-a6d90507abe4", "sighting--5cacb64a-2538-422c-8e83-880f0bd2290a", "sighting--1c271255-fbe1-43cc-a259-6c89295cef4a", "sighting--b0278348-4119-4e91-a26f-7a1aa31c5149", "sighting--f1bf13ce-3142-43ee-bd5a-4ac241073011", "sighting--ab19aafc-27e6-4bfd-94b6-ed9894c40c12", "sighting--39ee87f3-ba95-4a51-958e-d4b9b1b85aae", "sighting--9663b1fc-6eea-40ee-9f5b-e88cf9ab36ba", "sighting--c6cfdaeb-1d96-47b4-a4ff-765d6ed919f6", "sighting--beeff3ff-1854-4fa7-9b13-facee2bfe001", "sighting--47deb724-b919-425d-8e00-758f29ac219d", "sighting--a31a1afd-4fed-44dd-ac9c-a72d8a3ee94f", "sighting--f1355925-e7dd-45ad-973d-c8a8752a9626", "sighting--0dfbd333-3e7c-4680-948e-3a7d69362d4c", "sighting--1e279ef3-f4de-4e34-9df3-cb4501f15e0f", "sighting--a052d147-3f6b-40a2-81e2-df2fe8e4da4d", "sighting--1d243216-4279-4b1b-b781-6164982188cd", "sighting--6b8d9079-5fe3-4e78-96d3-2853b49a409a", "sighting--e7406ff5-2cff-43ab-be93-2f30872dd227", "sighting--a2baa5f2-2ba5-4e85-8a95-54e2b6868fe7", "sighting--97bdbeb8-4189-42ed-b830-5ff4fcf00f2e", "sighting--88ea8255-1f4d-448c-8cfb-2330d30af154", "sighting--ace6277b-453b-4553-a710-643fe101ed19", "sighting--c52b5f66-3c2c-4b90-828e-26f0b49a634d", "sighting--c5719452-d4a6-4cb4-8bba-59b2a2b91950", "sighting--2c2c4725-3a58-45be-9baa-034d60d88e3b", "sighting--2bec44fc-7ba2-43fd-a56a-2890449082d3", "sighting--1339917c-3fe1-4f8c-a1f8-688245eeb2a4", "sighting--efd3aff1-5879-4b0d-bc4a-75518047f8d9", "sighting--800a11fe-63f6-4beb-a385-767c01cdaaaf", "sighting--be122dbd-3df1-4359-a9b0-01a75c1b6b7f", "sighting--1fc4c273-9424-43c0-959d-0f03d6e022bb", "sighting--9045b360-a9a7-4d2d-9f2a-a176df1be863", "sighting--0a2fe257-cce8-4da6-a6a9-2d860800ce5b", "sighting--1ccdf759-2ff5-43ad-aa36-c27d3e556809", "sighting--477354cf-802d-45c2-bb28-f9156b8a533c", "sighting--0f0c594e-91f3-4a10-b912-329d07f1b277", "sighting--06204b3e-3ee5-4279-b779-fac5911da47c", "sighting--6949922e-13ba-4f98-91c6-157f7d81b9f8", "sighting--28e67590-74e0-4c50-8608-70adf2b6f02f", "sighting--f728869d-1670-4a9c-b519-696b361686c2", "sighting--1dc88544-d51c-4d4f-933d-788546d680c3", "sighting--d53e1f6a-a104-4a8d-bad6-3ea1d5d057cf", "sighting--bcbc91fb-6ab9-403f-ad3b-6b20e97c07ae", "sighting--78865a2e-5b48-4efa-88ac-3101efc5eaa7", "sighting--30ae2893-e1ef-408b-9bc7-97fd247a27bc", "sighting--1fdc1235-7dc1-4113-a086-f894b0210531", "sighting--a49a4255-0c81-42af-8f04-2bbe7999ca39", "sighting--141302ef-fd64-448f-b7ae-e5fed03aefd9", "sighting--c2bbbe6d-620d-48e7-bde0-8b7688d503ca", "sighting--f5ebc495-5483-46b1-a063-83dd25f62eb5", "sighting--7a04e117-9e19-4d30-a690-8d6b55c5eab8", "sighting--c5c9100e-48da-4904-a261-a31041701613", "sighting--d75ba427-6439-439f-baba-5350dce952ee", "sighting--589e3bb2-65ee-40ad-84ec-b40918779f42", "sighting--db6b3383-3714-44c3-919a-f1da43b60a10", "sighting--382d8022-6434-4b53-939d-5f8bd6550c00", "sighting--457d81db-5dcb-4cba-88fd-963256f74d71", "sighting--b423d2f6-4aca-4952-b2d8-af1e436b76e0", "sighting--86f961e6-2c6f-4651-b9b6-e2f5da8a4197", "sighting--ec38204a-9d0e-4a7d-9615-f8c60a295750", "sighting--36e31036-9670-4914-83eb-b9efee4a26f2", "sighting--bc2c80f0-ad4e-4c93-a639-ba4a5d2bc8f6", "sighting--41407bfb-4af0-47f0-82d0-9f6c351d2111", "sighting--c60c193f-8cd1-40ff-9b18-7616218a57ad", "sighting--6d0e3900-5c7b-4029-935b-9f81e6c2c17a", "sighting--cae5cdc0-9c87-4c4a-a386-de094f54324b", "sighting--2d88cb78-26ca-482c-8dd0-1ca92dc5d4bc", "sighting--2c005581-1131-43d0-965e-af68b2dc2b83", "sighting--18ed0897-3a4e-441e-a658-d9b03507065e", "sighting--7a3fd20f-2f89-4cb7-88f9-a5d7cb101467", "sighting--8c59f124-532e-478c-9426-d3a7faeac7ea", "sighting--b2771327-b158-4305-991c-2b8f88ed5d9a", "sighting--f37b6e12-2d45-4c5a-b4d6-268efc6b11d2", "sighting--f3ae563a-98fe-4786-ae37-214c73371870", "sighting--ad2418fe-d883-439a-a4af-a2ce12bc466c", "sighting--0f80aa4c-a936-41f6-9c34-fd0d137a5361", "sighting--eb24da93-33c0-4bc1-946e-a6f8aeb2d027", "sighting--b08d6476-2ca7-4382-a0d2-e23c054a3284", "sighting--cb23e37f-7ac0-4d1d-8573-2a718e145ccb", "sighting--37ced1eb-7d1f-4fe8-825a-fc738b563439", "sighting--f049e717-b614-417f-a805-3e084a6314d9", "sighting--ee27e4df-23de-4d31-9df9-6aceb26aa890", "sighting--5f16075c-f82a-4f50-947d-17d961fefd3c", "sighting--fe0af6b7-9c02-40f1-bfc3-04fa4c2c1cfd", "sighting--8390cd39-9344-492c-9e78-68d077c6d49e", "sighting--08ce7af6-de0f-43d6-a5df-393fcec3d210", "sighting--904afec9-d53f-4a45-8f7b-24ae200a92a2", "sighting--7a06f80d-df96-407c-9281-63553c3d8849", "sighting--16f1311a-0462-4146-927b-884d130135ed", "sighting--43125357-77bd-4d4a-bbfa-692ea1df8f19", "sighting--75567ed1-ad6f-49c6-8674-14abe511c1d2", "sighting--9db66f85-5d5b-422f-90c3-3f4bdffe1b79", "sighting--7d179248-8b28-4f57-878b-7a5bda249153", "sighting--4ca5c553-4d2a-480e-99c4-af4f3ae1017e", "sighting--d9caa057-effd-49e6-a397-ef90cc485c7d", "sighting--7c70beec-ec10-4c78-8417-29c815aea3b1", "sighting--941b447f-7165-4905-af11-102486cff98c", "sighting--1d96c084-c649-427f-98e6-8a13c0d5f484", "sighting--b28f85c1-48cd-4005-8618-7b0c36a57174", "sighting--e8e424dd-db90-4a91-8dfa-9ef74ea7c673", "sighting--bf90ee8e-a8b4-4c26-9182-cf04344c6260", "sighting--696b3ccd-7479-47e6-bbc9-d9da1d54fcac", "sighting--b1464f42-bb77-4fc8-9b0a-b924279db3cb", "sighting--2e459365-088a-415f-a0b2-0fc275a11c5c", "sighting--76ffcaf7-8cf4-419c-8dd2-67d8b1b8aabd", "sighting--9f144d0b-b194-411f-8374-cec7cb3afc2d", "sighting--f64cf833-74fd-44e3-88b7-ef890f3502a8", "sighting--a91fbe06-14c7-4a70-8c31-4206332707c6", "sighting--bc97da21-0bf2-4362-aa7a-c5a3f1aaa3cd", "sighting--6aeb4a08-78bd-4a5e-8119-18d9803644e8", "sighting--5c295d5d-d72b-4878-a2a8-3d81f621b404", "sighting--4868a0bc-06b0-4bfa-b401-8c670142032f", "sighting--58372f35-cb9b-49cd-ab32-4ba9bc9bc728", "sighting--2280ad0d-a72b-4eb9-9dde-ae5c3e8ad3f3", "sighting--688a8e5c-a201-4a51-bc2b-cf673ebb501f", "sighting--661a215b-5e3f-4d21-bc0c-ccaac27ceec2", "sighting--871b06c6-825b-467e-8583-9f1db46fc582", "sighting--d35eaed9-54e2-4213-b65f-d79bad3e7f55", "sighting--a4f5b565-8f86-4faa-93f2-84852b83ef3d", "sighting--cee75947-d62d-4968-82fb-2537079e7adf", "sighting--d69dc53d-b8c7-48e2-bfdd-82d0d9d17433", "sighting--be05a90e-22dd-4aab-ac0d-30c0d7b81ea9", "sighting--f105d725-021a-4bd7-b2f0-8033a838ca87", "sighting--7c945ebb-ac12-4f28-b606-3f76b378af9b", "sighting--27169d28-6a25-4646-bf41-3826d86fa7bf", "sighting--64a94493-da78-4799-b2a3-f751b1cf92ce", "sighting--af4126e1-79c6-4aee-a7d9-cf48c2cd35a8", "sighting--2a6f7785-aa54-477b-8dce-be5336978ac6", "sighting--5188d022-6a2b-4645-8d91-ff6b1aaa92c9", "sighting--27f4afcc-f2be-4a6f-9633-3ef04c7cbd0c", "sighting--869688d1-78db-44e5-86a6-905be9497ea2", "sighting--a710da4e-d419-4049-a936-527db9d41321", "sighting--18839b82-8e5d-4879-92ba-9eddbdd7fa11", "sighting--f66a2604-7ad1-405e-ac56-c2484b6eceaf", "sighting--0ce0027c-67ce-45bd-9b2c-b2aead55f303", "sighting--31c10d33-6004-4d62-b6d5-43d67f80b49a", "sighting--b75063a2-e1cc-40f3-9900-a230e687dbb6", "sighting--1e11f2c8-e779-424d-97aa-5c287fff0d2a", "sighting--2582dfd0-b429-4d54-8f90-feac794ecc6e", "sighting--c90393a9-a41d-44d5-af68-328af7fb373e", "sighting--24c3bbdf-b410-4a6a-b5ec-2170a3465be6", "sighting--005905b3-646f-4d15-bbf0-22376b76fb37", "sighting--d04df3a4-e241-4be5-a285-dc94cb153100", "sighting--1d83b733-f79e-43e6-8713-3f93bc2bf93c", "sighting--457229c9-63c8-4a2b-b323-c3bb7aa0a08e", "sighting--625e3ca1-0748-4f5b-818d-1ec10c4bdc86", "sighting--68f17dc7-1fcc-4e4c-aef9-c102926b1921", "sighting--a8ee844e-844e-4fe5-a4e9-a1c0f489d1ff", "sighting--09fb4d8e-b6bc-4c9a-8f44-6c5467f4016b", "sighting--597ca6e8-1891-4204-9c64-3041608eea54", "sighting--63691e91-e391-4687-bdf3-874903480459", "sighting--6916b407-419b-450a-ad6a-7d577a00daa8", "sighting--42ff710f-7452-4f17-9ba2-c97fa13cc965", "sighting--f9af3817-a889-46d0-a8ed-fda884c37781", "sighting--6846c734-5242-4d47-b149-a48cb7010c35", "sighting--df57603b-6be7-46f9-a56b-57ebe6f23c85", "sighting--752093b0-2a3c-42b3-8fec-099fe86afe9a", "sighting--c1506050-e6e6-455e-adf9-13bc449ac54d", "sighting--1eba391f-92a4-4f21-b913-43aee20e3656", "sighting--bcc84776-a360-46ed-ab78-1536660cfc43", "sighting--5b9f7811-c134-477b-adca-3425a11a51f5", "sighting--0995fad7-1285-4a6c-add5-24351fca1c53", "sighting--ada2b9d2-321c-4f11-9988-c83db7fa224f", "sighting--b6000738-1a51-4417-bf35-dc491ef07c1f", "sighting--58d27aa5-5ce0-48b0-bcc8-fafb6d843f62", "sighting--ceed9d05-be99-4928-8105-f4ac09aa2f46", "sighting--1b700a6f-f730-4642-8457-9bb73eed4465", "sighting--8594d0ef-a9fa-46e7-99ce-ec5c5bd1f987", "sighting--07c989c7-fa3b-470d-a769-3e894996d684", "sighting--42b97908-6610-4a3e-a9f4-2085e20d5386", "sighting--1378e9b5-f6fc-42d2-a353-39c07c4bac4f", "sighting--056ec904-11b1-4751-a686-9d7882b58e97", "sighting--a1b94d4d-79a9-4dc8-b9d1-c0bde0b033f2", "sighting--a2a39809-3f38-424d-8791-a1054db468cb", "sighting--a60a9bd3-1309-4120-8a98-c19d741d7081", "sighting--5ed1ed06-1212-4588-bff3-49ed6ebd05e5", "sighting--31e13941-7252-49a0-8c02-e96a5310dbf3", "sighting--04485dd9-9af3-4a93-b1fb-e317c73b38c8", "sighting--652ca974-4c23-4eb2-b388-67dc6246cc22", "sighting--84f95752-28ad-4f84-857f-af902bf01628", "sighting--7631f9d4-61a8-45ea-9f4e-7e87ac5fef7c", "sighting--5e2c5440-6943-491c-9de2-588a75102a5d", "sighting--688d434d-ff35-48f3-8d26-9b6509d0bff1", "sighting--092ff8e3-a260-4b78-9795-738ff8573988", "sighting--56699335-db25-4a86-9048-1ffd3d7518ab", "sighting--f12f13d6-4161-4898-adce-c835226438dd", "sighting--4f50cdac-1c08-4879-be63-032d8bd7b9f7", "sighting--92f74536-2b7e-4fcb-a895-f0c831e9c719", "sighting--a3d096ce-0a78-4a49-97f3-3a175fea54e3", "sighting--a14efc6c-6bfd-4beb-85b8-3e4d87af36e2", "sighting--8f18a5e4-3b6f-41f4-b377-de9198e21ffd", "sighting--af0cc171-0ffd-4fa1-ae92-c5d9bcb79a98", "sighting--c5093c83-d796-40e7-b4cd-af06733cde40", "sighting--b9e052d9-031f-46ca-a9cb-ff7380ac4300", "sighting--cd6e4bf6-6d51-4eab-a03f-7f5def9045f5", "sighting--13ebcd60-da32-460b-ad85-ea7371ae1281", "sighting--36675a8a-c8ed-4e94-9e60-451673d6e8ba", "sighting--773e208b-7fdc-4950-8d0f-04f26cbb86cf", "sighting--90edb986-8a9d-484a-88af-dd4d1fd52eb2", "sighting--ba382fe4-401e-4cab-b0e9-e784b829a063", "sighting--c71b034a-cf6c-40a3-b0e6-0f3dbdd6a881", "sighting--7411ef3a-10f4-4b21-986f-97e24cd63635", "sighting--53173132-4fd0-4603-91fe-d2a97b13ad18", "sighting--ecd5d826-45ad-45ff-9c5e-0ed58b4245c6", "sighting--1a2f109b-af84-42f6-b9ec-6b5da601e030", "sighting--20e3910f-6218-40ea-a563-d2dd1302161b", "sighting--23e7de14-8c12-475f-9be4-a611af7d0461", "sighting--105b620d-670d-48a7-b82d-94a70c4a3032", "sighting--90077f71-a118-413e-ac14-8457dacb10cc", "sighting--196da172-4c99-4fce-8dbd-f0606f126efd", "sighting--15023b4a-ac77-4906-bc20-5d65178be9d4", "sighting--c11c48d8-8c31-4565-a68b-56a4ff2e8da5", "sighting--a463f540-c1de-4485-8e1d-7e914df0703c", "sighting--a41a4b99-4b33-4888-9380-2b3c986c9b14", "sighting--eb12ae65-b237-40e9-85d1-1ddc9ab61b5a", "sighting--0b0026c0-35d6-461d-beb0-bb583de3d4b7", "sighting--8e067691-9147-4219-bbec-2a8300c5b488", "sighting--9ce0eff8-5ab5-4c52-8eaf-d977ba00a91e", "sighting--1332aa09-d8e2-4d07-b027-87d49858f377", "sighting--0984d6ae-d35f-49f1-9648-0b9acdd37f70", "sighting--937bd2d4-66c9-4143-acf6-f1b4a5bc2910", "sighting--04e0dc95-7881-4aba-8388-9816a96163e0", "sighting--7112e59f-7dec-4b8c-bbfc-a25ddc5d6973", "sighting--70d05a32-a700-4d03-82f8-cabd68dd05ae", "sighting--3c40094a-3aaf-410d-b4eb-191f7d474ce2", "sighting--3c5fb4ef-564a-4f2e-b5d6-ef6350b61e2a", "sighting--658c23ab-5eea-4230-afd1-db64545918a5", "sighting--23399ebe-f34a-42af-96ba-61801ea23a9a", "sighting--9abd08ba-a019-4970-a9dd-10a630a4231f", "sighting--4e6d1e2a-0adb-4119-9bd3-1014c6f22bd9", "sighting--dbe22e9b-3ce4-41b5-bf3d-3226d07098cf", "sighting--11f09de4-ff50-45be-9334-c688ff2d11fc", "sighting--a32c90d9-ec3d-4cc7-8b8a-1c0afecb3b41", "sighting--feaa33b4-fb78-4ca9-a2b5-169aff98876b", "sighting--729918be-3b1c-4bab-98f5-9ed4c702ca7a", "sighting--4d86c608-6034-45b2-9379-1768f5a144d8", "sighting--bdf0316c-be45-4ea5-aead-c59103aaa576", "sighting--46537b15-6468-47a1-8ba9-f61a1cb9561e", "sighting--f3e23145-6bf0-4b9d-8a2d-e8d5ea484818", "sighting--f04ae79a-f09f-469e-b624-647306720a48", "sighting--c96cc04c-962d-45e6-ba36-5ec07ff864be", "sighting--e6e9231a-c7d5-4e64-9cbd-996d994d0d96", "sighting--3c378f80-7f09-4d66-91de-73facf181537", "sighting--42fae4e6-dc16-4855-a63d-6252a1303573", "sighting--60cedcf4-74e6-49a3-8c93-d58b7e271798", "sighting--c60447a6-5ad4-493e-b28e-6556f5d74d96", "sighting--221676d7-07bf-49be-a683-bdce89ef4856", "sighting--e3cd2ef0-b0d5-4814-bda6-8952493e0640", "sighting--101430e3-00b4-4ced-b4be-35cd1e56f5fd", "sighting--d0499f21-11b1-46ed-b54a-350354b41a1f", "sighting--cc797b91-fb25-4d35-a433-8b199f2f05e0", "sighting--5620012b-a4a3-4575-86eb-427ddd0de622", "sighting--538a9f8f-7044-4564-bab5-cdd1f74fbd31", "sighting--eae26743-812f-4617-8cdc-e2d4209206cd", "sighting--03051bae-a3f0-4199-86fa-8c525ee3d6fa", "sighting--6bf536db-1219-4c7f-b029-2b588f7f1302", "sighting--0a38691d-368f-4376-aaa8-bb1a18ab954f", "sighting--54ad086d-285e-4380-a359-747388647afd", "sighting--3a7f3efb-1629-4294-9520-cfc255abdce1", "sighting--20058524-5bd5-40e2-966c-51128d117095", "sighting--b492319d-5d9d-4a47-9c5c-b976af4bfa61", "sighting--55656f79-fce2-469d-8c2d-9d4ac1afc658", "sighting--4cf39f91-1cff-494b-a0d7-6b414108cb6f", "sighting--3d4341cc-0892-4d2e-a1bb-6d808ab9efe8", "sighting--5ce18b0d-87ea-43ae-9976-1ff59eda563c", "sighting--7f218482-4724-4a28-b1fe-914fcb547873", "sighting--47181c25-95a5-48c3-8394-888639790a82", "sighting--c3535e64-f972-46e0-921b-b5350dbcf01a", "sighting--e7f49b98-81b0-4d7e-8c5d-435895688f3e", "sighting--e5d18d3b-364b-4237-885b-2514c48c42d5", "sighting--cf23649c-e550-4d5d-9ae8-b5297189b55e", "sighting--34b16ee5-563d-454a-9b3d-d98f00ad6a7e", "sighting--8bb12f0d-f769-4d35-ac79-804c3dd78447", "sighting--f4dfbb8b-3de9-4b7f-b962-0062d784e2f7", "sighting--22f8f805-608a-48c0-bbb2-9a6db96a1fb7", "sighting--e331d96d-470b-4169-b0a9-159bfdec68d9", "sighting--da67e541-c47e-4f28-b7b6-d645f680e7f8", "sighting--fad4a62e-069f-4526-aa4e-fc63c44d6dd7", "sighting--bde2dfc4-a2af-46f8-b1b4-c27299f7bcf6", "sighting--c8faa0ad-6c78-45ba-9a3c-459aeac9830d", "sighting--98b20bc5-5671-452b-a3f2-c86e2d9b9876", "sighting--bdef1a5a-c94f-4632-b8d4-705041858b5f", "sighting--7c26243b-5b62-47e6-8ff1-895ac85e27a9", "sighting--f0a2d98a-f851-4b3c-9ac0-6702e542bc2f", "sighting--d567b361-ed82-4a65-91b5-25c8f1a584c6", "sighting--4cda7b37-105d-4a0c-b5cc-8d71c10dc30c", "sighting--65c28de5-e104-4820-8d8e-7098c39d0434", "sighting--354469e3-a09c-48fe-83fb-71e1d4ca3595", "sighting--b2174cf7-9c2a-4586-b2f2-f20b478a0435", "sighting--9b8d6959-7491-4c5c-b208-2e922753a8b8", "sighting--6612e776-dcc7-4e1d-83a6-2ce4a09c9d97", "sighting--36002d42-6b69-4ba7-b6c8-987ba5d4591a", "sighting--2c9b3fdd-e84b-4493-938f-08ec62011dd1", "sighting--be08a824-9258-4bc5-bd72-2f914768531a", "sighting--f5f3f246-8c12-4582-ba58-0cfc1b354e4b", "sighting--73c68910-6bca-4bf2-b5a2-c67bcd1ff178", "sighting--2fd3c664-3fd1-4731-9d53-dd4619dd5475", "sighting--7a36cfd2-e072-4d51-a7cc-48afd54a9b73", "sighting--22a9f2d9-2c9c-4624-bc37-a3a82f87d037", "sighting--2b289a05-aa7a-4f50-8a61-a5a772fe3b82", "sighting--ad6df66d-4cd1-48b0-a0fc-101338243b42", "sighting--feaf4a82-590b-4e25-9cc5-693c2466eff7", "sighting--3e7de1d8-1db3-4ae1-bae2-af48729623e6", "sighting--d9427811-f3cf-4296-ba15-3a310cba21d3", "sighting--e832a800-55e7-436c-be95-c5dbf0ebeda5", "sighting--93fd531c-a522-4e78-b9bd-281ff5fde2dd", "sighting--e778f59e-abc7-4eb0-b1cc-1285aec3bb3e", "sighting--0a05ef6b-0b73-483d-9dcd-57becc18fe5c", "sighting--dd0568f6-a1fc-4f42-9f62-d7d3cd28e7bb", "sighting--106da739-38db-4c27-91f4-0844e75c5ae4", "sighting--37d55167-084d-44ac-9e7d-7ff675b30b08", "sighting--bd24da32-38e2-42cc-904c-494ac2a164a2", "sighting--4ec63b51-4319-4c04-b891-020fa5c5565e", "sighting--dbb490b2-3d34-4617-b904-ee946c558168", "sighting--a9cd593a-07f2-40d7-8800-5ecf476ba6c3", "sighting--b0673dbe-095a-45a2-a25a-bf5319af7692", "sighting--bf60c3e6-74f8-4d96-ab1a-0e30add8b628", "sighting--bac87605-244c-4742-a0a6-6efc0abd555b", "sighting--ac59704e-041f-45c1-9da1-e2411602d494", "sighting--29bc8e1e-3f91-47dd-ae69-910cacb42e61", "sighting--0f9ff72f-01ff-4ca3-8ae9-e7c24b911ac2", "sighting--4ea17f8c-1925-439a-ab23-c77a01a52b57", "sighting--233f877b-a4d3-4167-a8eb-ab4d004b0a57", "sighting--e34a98f5-6d25-45c1-8a0e-8b54cb70cdea", "sighting--e62181d3-3ad9-4565-8718-79a95b511de9", "sighting--ec43c407-9195-4afa-9d1d-9c074d72810a", "sighting--022c45a9-0a07-4846-a571-e8405cebcffd", "sighting--51c06d84-fd7e-4628-9745-afdd6f7588b8", "sighting--9a64d437-2197-43cd-b418-366fc2dc6526", "sighting--1a8f977d-a727-4c32-887b-6404d0b4e5f1", "sighting--edff7b55-d4aa-4aad-9bea-fbadc04a3b2d", "sighting--44586c45-1ef3-40b9-8b1b-660c49bbc866", "sighting--d4816993-5ba7-49ac-a9f8-1eff812d1085", "sighting--30501adb-8aef-4253-8f50-60318447b2fd", "sighting--96f0e649-4166-45c1-8d01-5bfab1356fef", "sighting--002d90f6-5172-400b-87ad-83f63ace9bf9", "sighting--066a57af-29ed-4489-84fd-4c2f9bc4e378", "sighting--93d6aa33-5090-4141-8f84-2f6307792d5b", "sighting--6287eb65-d904-4c18-9e24-7794735637fe", "sighting--e9573eb2-0fe7-49e8-a702-f887dc945c44", "sighting--89840824-6aac-477b-af0d-14c4464c6a6c", "sighting--968d5970-a5db-40e3-9c6f-bb9621293af0", "sighting--75aad1ea-3b51-4490-ac12-ab497d8eaf32", "sighting--ce5943ea-b18e-4fbe-9cb0-9f16a4bc0c49", "sighting--614a73c0-bfd0-4c65-9391-05dba1305eb2", "sighting--87057b00-0f6d-4ee0-b0ca-b610ecefd360", "sighting--4fecda5b-3290-4d70-830c-6a50ec0742ca", "sighting--9df691da-3440-45da-806c-5a383ac0120e", "sighting--683aa47d-3d81-4510-9b7d-e8004f6b20d5", "sighting--02fb1875-0003-495b-91b7-31f08b51732f", "sighting--8ab82d21-f9fe-4e81-87cd-95470f082cb8", "sighting--6eb0cb4d-d9a1-4ca7-91a0-1922119536ce", "sighting--a376c0e4-13be-4891-9c26-cbe0c5fba341", "sighting--6f5cb82b-b74d-49fd-83b6-4d8e1f8917c4", "sighting--a04caf52-4ca2-410b-8d35-52d8531eb576", "sighting--fa2af8e5-a93c-4c27-952c-f6ef07f65732", "sighting--13a1e2f3-1621-445a-8835-c32336caab3b", "sighting--505de6a5-0051-4565-96db-a4ecf4063632", "sighting--39c55406-9cf5-42a9-94f1-52215fba673b", "sighting--8c242e92-5181-4d97-8d87-95d697d038b4", "sighting--18644e83-0b69-4ed9-88bd-c185d68da62a", "sighting--f297a116-b132-4438-b58c-87c8236213f2", "sighting--8a610d33-c23c-40f5-bc13-a71f1a78f1ed", "sighting--ca603393-230d-41dc-bc11-f11447cfc8f5", "sighting--7c04e116-4cbf-445d-9304-d768484bbf66", "sighting--8f580c2a-c356-4143-9bc5-bf25bead4764", "sighting--f5d20c59-6c35-4d56-8bbf-09aaee4f1eb0", "sighting--fcaf753d-c6d9-4fd5-b76f-ecd55c68511c", "sighting--1176398c-760b-4bdb-af45-3a51f658e044", "sighting--59c07cdb-375f-4770-a1b4-43e7a1195313", "sighting--330a3e5a-fa31-45f6-8bb5-9dd162012eb2", "sighting--e2be7d5d-cc9c-4af9-805a-fb9290cf936c", "sighting--5b4edd27-0fee-4aaa-85ef-efe1bf73c6c0", "sighting--153c8e85-cbea-4734-a0ec-7294a2160ac4", "sighting--13bdad08-8a5f-4db6-9da8-5fd93dd10ade", "sighting--fc4490eb-4831-4974-b4ba-ba130cc6f82c", "sighting--3b45898c-7155-4176-b50b-23069549bc77", "sighting--c18e83cc-fcf0-4a4a-9236-6fbe995ac5cf", "sighting--12d36346-8802-429a-a45e-0d5bb286835c", "sighting--59b2cc9f-50e3-4477-92b6-7d5dec99f067", "sighting--eb296819-bfde-40a7-8dc3-e5a442c611f8", "sighting--b9015136-02d1-4de9-a04d-0f59bcc9f2f9", "sighting--fd834927-e8ab-4693-9bbf-b4833b0af3ca", "sighting--91dd4892-b60a-48ea-8479-e99359bc3b7d", "sighting--63951b9c-65f4-4974-8ba3-d4b9464e7b47", "sighting--05a9b850-be0a-4753-b5c2-bc42f271ee0e", "sighting--1036e39e-d8ce-40aa-95d9-d4149bfc22ce", "sighting--8adeef33-337e-45cd-869b-c9495b22ba37", "sighting--79347c9c-84e9-4a60-9b28-d50c91517542", "sighting--c3ad0cc3-cf92-415d-9acf-61d58eaf588b", "sighting--a751e2e1-5131-45a7-9d4f-d35c7da4126e", "sighting--a8b0c37c-9baf-4102-9543-f56b1616d2ef", "sighting--14807285-2b5f-49fd-a914-34fab9ce8aec", "sighting--d41300c5-3849-4290-9eab-952d25d39714", "sighting--172f6791-11cb-47b3-8927-00e88ced4072", "sighting--973614d2-9af7-4df4-8df2-07cef597c58e", "sighting--cb76ac79-babf-4674-a0cf-eafbd37f8ced", "sighting--6f33f812-21ec-4c95-a2e7-c67e25c62ead", "sighting--573c3e55-b042-4196-9cf2-090b908183bf", "sighting--5f89da10-c15c-40cc-9f10-1e64e0dfbf32", "sighting--f0f45a2c-b21a-40fb-a45b-b9aa3e7ee20a", "sighting--ef5a5921-71c4-4133-b493-b8f5d1fd9b69", "sighting--3f200530-720e-4611-b4ef-bb89ce2a3297", "sighting--86f4ca0b-527a-4509-b918-3c1ec21869c3", "sighting--212b6073-b09a-4504-a8a1-7ac86e5a1736", "sighting--a4f77d85-f01c-4f65-b916-95e6e3dc7e35", "sighting--dfd8f672-e930-4563-b5fa-5d2bba80d472", "sighting--38860f9c-9941-442c-819a-fdc82ab56114", "sighting--41900520-2ce6-488d-9ec6-276d1b3ddf0c", "sighting--091ef92e-aaec-40d1-88b1-d06617c54764", "sighting--57ca5e05-7d22-4341-aba2-887780f47ce8", "sighting--d0eee554-2880-488f-9963-7484b6590bd7", "sighting--37848cd9-68cd-433f-b16f-ed0e67b3cb27", "sighting--a2c7aa06-b46a-4ffe-a21d-2878c355a1a6", "sighting--5236a9cd-9f39-4040-b7f3-6597dea80bf6", "sighting--a076159a-f2b9-4330-a189-ea0516c361c9", "sighting--2844fa4c-97dc-45a1-a18a-1d2d483b9138", "sighting--bd61ffc3-820c-4d89-aa1d-7cf1d22da5d3", "sighting--89af51fe-4568-47c7-983d-71494a2b4074", "sighting--6c674d41-3329-4df8-8893-dfbe6895a8e8", "sighting--40d926da-40e2-48fe-8a6f-44f47693de67", "sighting--b5d05ba4-9def-4476-99c0-ef8790139e9c", "sighting--4780ac00-3bb0-4229-a11c-ac47453233a0", "sighting--43ec0156-658d-489d-8b4c-bdc2b2c896f2", "sighting--6e7a955a-8e00-4beb-a61c-08fde67875be", "sighting--ead8322a-00c4-4dfa-8c54-d2ba1c36f77e", "sighting--fc45effa-286d-4308-b2a2-b6c849950e46", "sighting--e1f8e08b-9eb0-4961-af36-67602f48490a", "sighting--c9978fee-bf43-41c9-8772-7a456491eaf3", "sighting--6147a294-66d6-4bfa-98a8-a290e623c2be", "sighting--aef1fbe3-6d26-4422-9388-517f0a4da802", "sighting--2c1816bc-c565-49b6-8ce5-2b7fb658c2f4", "sighting--b9174e0b-d691-4d23-b44a-4192b1f9ed69", "sighting--de951979-b85f-462a-bb1f-d176e6d1a15e", "sighting--3ae7f1ac-f170-4a0a-bf37-0c7a140ae98a", "sighting--f4e7527d-0cb5-49da-9ed8-426f47a89237", "sighting--248ac8b9-8049-497e-92bc-15a61d1232f4", "sighting--6d05ccac-bb06-4319-a05f-1fbda77649ad", "sighting--96e4be19-9c09-45a5-9420-abd4c9b82042", "sighting--9230ed2a-1e4a-4bdd-860d-b2b0492bbba9", "sighting--69cb940b-d0ae-482c-b78f-d8642f47a8ca", "sighting--8fc7fd32-a90a-476c-ae0b-2e90e5bcd36b", "sighting--154723ca-cc44-4c2f-ac43-df35454e4dbe", "sighting--eaa5fc06-afe4-4c85-b7a2-b5c719359681", "sighting--f2550910-88f0-4734-b2ee-4eb86472f3c2", "sighting--93ea4d22-2c96-4f30-a998-b690830d0898", "sighting--9d43f975-83bd-43d3-80ba-c83505fae955", "sighting--b2dee4c4-e513-47ea-b079-4eb37c16e4f3", "sighting--95f6a45e-8af5-4dad-9507-6aa0daaed4b8", "sighting--5400d473-56f4-4c07-bb80-dfa918d672b4", "sighting--05616466-bfba-4a2f-9f2f-75cc15d80107", "sighting--cfc5085f-1dac-4cfb-9ddc-ad1ee8b85bcf", "sighting--d7b0b09c-b79d-4017-a8ed-b74a88aa15c5", "sighting--b3af5a62-9837-4023-b543-3118f76a51c6", "sighting--9440a3be-47d3-410c-83d4-29afa39f5147", "sighting--3e3665c1-90ad-4154-9bba-d2f2387c0765", "sighting--141151bf-af99-4701-b78b-a5b0222ccb4b", "sighting--624af156-be30-4b6b-b9a0-027f46bf9005", "sighting--bdd5ba65-c256-44fd-9c00-c7362e8e62d5", "sighting--05ccf9a3-c497-45e8-b4c8-5a8bed913084", "sighting--f484d69c-cd4c-49d5-b8f5-6f204de9e1c3", "sighting--e81ce3cc-9e89-434e-ba29-9d9dddd4a563", "sighting--22fbaa07-b3da-438e-b2f0-19ee021e27f6", "sighting--ce00d70f-286a-41a1-a517-7f659d91c2a1", "sighting--df4c705b-c21b-4b43-8f1f-9c10720f77e0", "sighting--4f15506c-026e-40c3-8925-3b194c28b871", "sighting--90aa9ec8-8594-4a5c-a3f1-768ac0c316ae", "sighting--80eaf084-213b-4a0e-bbc7-856147a9ef33", "sighting--32cc32df-44c6-494c-bbd9-5da715919736", "sighting--b2a6fcb6-2ce2-448e-bf4e-b5e0ea44901a", "sighting--f2b85ac7-0ea3-4b89-bbbe-955d7799b4ed", "sighting--8faa289d-30d6-42ab-8889-99131be93527", "sighting--4263d3b8-00da-4f3f-a461-9f931a6dfff2", "sighting--9530af87-e2bd-4f8b-a87f-b093b307b4d3", "sighting--c03df1f1-5ed3-4d75-9726-8b58d063c745", "sighting--9929de15-0e75-4feb-884d-6c1ae91565a9", "sighting--60e7b9ff-4a01-49e0-8ef0-a2b4755bb694", "sighting--c2ef7b8f-4e34-4fda-8978-412c8546b303", "sighting--5acfea94-f187-42b7-ab0b-83b598b935d4", "sighting--c9e34a3c-b7a1-4d3c-bc62-8f536a77742d", "sighting--649ce4f4-57f8-4bb8-9206-368a93a35a3e", "sighting--68576688-43c7-4448-bcf8-41605cc299df", "sighting--8534a5e4-39cf-4108-b1d5-d1d5123a919b", "sighting--0aa20fb7-627f-4f1d-ae6e-eb78e23295ab", "sighting--7903f488-af11-43fb-b71d-d51bdc7bb69b", "sighting--8cd3a313-97e1-4a10-b3da-575533335ed9", "sighting--408bcc53-4b41-4ffb-bff4-a275ed031f44", "sighting--c08c88fe-ac7f-40e1-b72c-ad6be5e24c69", "sighting--c53df5a0-6d78-455e-91c3-286ef2181804", "sighting--d36711a0-5632-4496-a6ec-6cacc20b9903", "sighting--7a76aa86-3e3f-40c2-bf0e-c1d769eaa772", "sighting--c295b189-80aa-483e-9924-17a11d5a6e31", "sighting--8b267117-7431-465c-b47d-f7a3c8c5d05f", "sighting--c954a902-2e0b-4f4c-9408-5b23ab395481", "sighting--4d39c657-da33-4e24-9a38-02291f576656", "sighting--1bd14588-9d34-41bf-905f-1f8b42029968", "sighting--bcd135b7-38e8-4335-adf9-82075dd9f892", "sighting--c11aabf2-8ec1-40ed-860e-7051590327d3", "sighting--25ae1d76-4456-4b18-bcbd-90beba6ec8bf", "sighting--e18a77ac-5fe9-454b-ad8a-cb4f6919ac95", "sighting--acb928ff-51ed-44b5-bbe9-779495def50f", "sighting--65a278cd-f23a-46ff-abba-aeb346c116c9", "sighting--fb6a028b-7c16-4fb4-b0a6-99b813fe1db2", "sighting--99681520-9668-413b-9f5f-b9a82a3e4582", "sighting--f859a875-adbb-4f08-aff8-fc6f40146a16", "sighting--bd3ba092-15a1-415f-baef-a17cae9f9cd1", "sighting--5057f297-8262-4b8b-9bd6-e1f74d7603ee", "sighting--3a440e08-34e5-4295-a4d6-bb2815e354bb", "sighting--e861c2c4-0ee9-4e8e-81d1-1ad195a563bc", "sighting--1678de7e-1792-4089-a057-7a90472e1057", "sighting--4d993e42-23fb-4c6c-8112-583a76bd0f42", "sighting--95dfb18a-1f13-477f-ba55-b583621316e7", "sighting--469d7925-7fc5-41c1-98c9-48542d9565b2", "sighting--c7177313-01c8-4a3d-8759-90fc5462aea6", "sighting--309ee671-4b07-43f5-8572-be717788a877", "sighting--2f6e8fe2-4861-4106-b5cd-df72cb370ad5", "sighting--783580da-7d19-4686-8930-145edfd4b4df", "sighting--2f02d428-656e-4041-bd72-6dcd9da23cba", "sighting--9133bd1e-a749-46d6-9ede-8fda9290ce2c", "sighting--ab25452a-9fec-42e9-a483-36d5e9966379", "sighting--bdd15798-fea9-4a21-ae62-90f765cd51a4", "sighting--33fbc044-814d-400b-b274-8ef4a757db79", "sighting--4a041af2-5bfa-49a6-95e3-da0679ae66d5", "sighting--e82c81bc-8c70-4321-b996-c1b26daa60e5", "sighting--1e2be280-275d-46dc-9ccd-1d03b125f63c", "sighting--d0378ae9-72a3-47bb-a1c3-17f407adcff3", "sighting--28d3b4cd-5b83-468f-b2bb-9878e6c017d3", "sighting--4104d6ff-5dad-4f1a-959b-efede1faf82f", "sighting--eb1e0409-3cfd-4ebd-99f8-11c204e4e540", "sighting--cfdccae5-3eef-4d12-b54d-bb29d20c8670", "sighting--9a244bfd-668c-4797-9981-55e0fb558322", "sighting--1aa177ae-c1eb-4767-86fe-165ea7f561ef", "sighting--3f59b5d6-a397-4d80-b508-c3f1f4adf063", "sighting--e25371ac-9536-455a-8a7e-2fdeaaec2a09", "sighting--41054047-9c64-46d1-a7be-3096ae2b6051", "sighting--0674c5ee-5543-4c78-a8b1-7fce4b51aadf", "sighting--9c45bf11-6763-4531-83ab-6c752c3cf13c", "sighting--09455af1-7980-40c4-a0af-0cc1ec0bb158", "sighting--c7269749-690c-453f-a13a-5136846f4860", "sighting--f5ecfe24-4e5b-4ec4-9484-34918c773664", "sighting--79072199-e2b0-4031-b12e-048e17816561", "sighting--61495219-8980-464b-899d-c326f1277058", "sighting--14ffb045-83aa-47a6-b6a6-c17e705e40e2", "sighting--e262e5c1-f680-4fe8-b55f-a0031e16e950", "sighting--21d2850b-c7f4-4de3-9fba-1c2b74392e87", "sighting--755c1b47-72b2-4d9f-bb42-82ee623a718a", "sighting--0c80972d-7246-4876-9266-626f12536f4d", "sighting--6bf6ad71-557b-43fe-b324-4f6b1a211e2d", "sighting--e1e909e2-8186-4936-967e-bfec459b55bc", "sighting--e06d6af2-0847-4314-a76d-4572e07ab832", "sighting--43e03468-fb2a-4b32-b943-c68bd6531aa3", "sighting--f01454af-e21f-4fe9-8548-fb6b4a5cd96f", "sighting--6ac4bb2e-d118-4775-9f18-526ea8dd046d", "sighting--20c884e9-c01a-4ea7-a059-3ebcf9b8aa0f", "sighting--929b153b-e950-4cb1-b5eb-410ac1f7c906", "sighting--a4587391-f5b1-4508-8f04-429b6bd27ba5", "sighting--7a22be10-a34f-4d70-abfa-6fece0a43370", "sighting--87a8ba25-2da9-43d5-9f98-a2b1b5fa341c", "sighting--be443acd-81d6-461f-b3f5-2d35803be952", "sighting--5cd927a3-8846-427b-85d2-08f8dd920980", "sighting--7228b846-b78a-472e-b020-6d89b643212b", "sighting--763e02cf-e1d6-4a0f-8636-194bbcf83631", "sighting--9656333d-940d-492f-b6fe-85457e82808a", "sighting--061b8705-94d9-4ca3-8cd2-db0cefec15f6", "sighting--730d5aa6-8956-47c6-9f4f-a4b6665db7a3", "sighting--191b9def-7b70-4ae9-9c77-2be6f5d94322", "sighting--8fa4c853-960f-477c-ba3c-e26cb8818c24", "sighting--2b06a12f-f4e1-4224-a7a4-1a73c9e747a1", "sighting--0393f4c3-5031-434f-bc09-c533a0a7789a", "sighting--aea0b766-e883-4f4c-99ef-55d7bfc6997c", "sighting--f6021108-c42b-400b-a03a-af7cf62c85b1", "sighting--801e73e7-09a8-417e-b666-5e270bfdd52c", "sighting--21862ae5-2a79-4b5e-a6ec-cc99c6663fe2", "sighting--adb41950-1d0c-47ea-908b-de80cf8d76d5", "sighting--2be56bf1-2bc0-497c-8858-b596a51c01af", "sighting--4aa7573a-1db8-4bee-9e73-472b6ab0f691", "sighting--2c4acb26-753c-4401-a330-abe6919164b5", "sighting--7c757496-6346-4b50-a980-aaf8d7e9bc23", "sighting--63c0d80f-14ba-45ee-815f-90fbb9c1fff9", "sighting--d136adea-4fb3-49c3-b6f3-4a9c8a4fd0fc", "sighting--e47a0217-fd21-41e3-9a75-9e71a6ec8f18", "sighting--d2628128-c6f0-4f05-b89a-b5b996828069", "sighting--26e79d03-1e2a-48c2-bef5-5ac90e35ae79", "sighting--e3030c4b-c861-400c-8cee-7fa892be634a", "sighting--5af2ff28-1df2-4cb3-830f-de8289e62661", "sighting--23e3994d-775f-4125-9902-cf712f825141", "sighting--5875e94c-a3ef-43b7-8599-3076a2b8dc82", "sighting--662bef37-e46b-469d-883c-6903fc786152", "sighting--431be2f3-9086-4d2c-beb5-818fe563be7e", "sighting--f3737fdd-26f5-4ffb-a739-55efd2a26566", "sighting--586008c1-ec3d-4d28-b71b-1834024de077", "sighting--2bb0203c-a7c3-4ae2-a4f9-81578542233d", "sighting--d41214cf-789a-4959-9dd5-d50d7c7a2ae5", "sighting--9f0f14a3-373d-4843-b78e-4f162436af86", "sighting--3f8aa137-833b-4bb6-bcb5-a493d89422a5", "sighting--54bbdb84-6768-481f-a052-37754288ebc2", "sighting--7556ca54-c9ea-40bf-8d5f-4373cecec8c1", "sighting--fbc73887-45f9-4738-9ca5-30098e13d830", "sighting--45e17e9d-d10f-46e4-81c7-b78db7b0f104", "sighting--771df416-f242-4cff-9afc-2f2d449f214b", "sighting--7c2bf3a7-3671-48cf-a936-6a6586cbde20", "sighting--cef4c156-2a77-4864-a952-2fd46343bc07", "sighting--72094cbb-1142-4bcd-ad75-78c5186ae80b", "sighting--40650432-f132-41e1-ae03-119f15aa81da", "sighting--bc15329e-38e0-4fa9-b8f0-95e7f5a0d463", "sighting--0a691e63-b724-4281-97a4-99eda9d30cfe", "sighting--6966dcae-3139-413d-a9d4-1baa92567f00", "sighting--c410ab90-9a8c-46ce-95c8-808a5421a49a", "sighting--13eba22d-bbf3-4726-83e0-8024e0cff0ca", "sighting--e22148d0-831c-4e3b-8401-eebfe3f9fdfe", "sighting--a4e55ccf-4981-46fe-b76e-60fb41991ea4", "sighting--4cf46a11-6e60-4d7f-9c10-09acf174e723", "sighting--409738c7-33bf-4a48-8311-a18c2c933ab9", "sighting--ec8a7052-41c5-49cb-8a98-c7bc4f9c454b", "sighting--36f2c329-4d0d-43bd-9b82-bd64b81676e1", "sighting--8b2d0e94-d0fc-4678-bf89-4c98cc8fe10c", "sighting--7d4453a4-5548-4530-90a9-4fa35f09b03e", "sighting--b2710e4d-813b-496f-a72e-26457b466290", "sighting--eb0682f5-dceb-402e-a47a-6e6ff82af7bb", "sighting--dcc04e37-8fbc-4036-8cf5-50b5ff0dde18", "sighting--56618a9d-49d2-485c-8517-bcff78e139dc", "sighting--6bd26223-b150-4751-973c-2b508443dca7", "sighting--8f11e089-5dd0-4ed2-bab2-eb5f488a4178", "sighting--2294ad56-94fd-4230-b50d-52d6927b96ae", "sighting--50a98208-b383-46af-affa-270f2c08fc7f", "sighting--b05e866e-3851-45bd-b36a-bbea48f29b83", "sighting--31bdf749-4b5d-420c-b931-a0ac4dbe7643", "sighting--c226629e-f5b8-4dfa-a3ea-6b8d76b2e28d", "sighting--36bbcf87-17b0-4859-a47c-879ce06ee18f", "sighting--20a3baf8-5eba-4a3a-a019-c44d0dc5ffda", "sighting--747caae4-1c70-444e-9539-79d400709328", "sighting--996458a9-9db8-4582-a24b-feaf9036c2b0", "sighting--8e80a4dd-2988-47c4-bd2f-9e3e585ccf77", "sighting--9c00d639-25c4-488a-a879-bcebf36f796d", "sighting--21997d06-6d24-4f46-81dd-8730f838a2f7", "sighting--13a28d80-984b-4eca-8f18-ae69d7eae8d3", "sighting--657e9506-67fc-4058-b8aa-dc724d24c94c", "sighting--f02128c4-863e-4096-a8b1-cb54d985c1b3", "sighting--623aee18-cea7-4e7f-8909-8f7bcee3a89b", "sighting--673a0073-7398-4b41-a461-707c6ae3dd5a", "sighting--d4ed9ecc-e6ae-4a70-bd67-d15a60b05ae6", "sighting--89d6d672-5998-4b42-86a7-e38374bfee31", "sighting--d44601dd-2080-4503-9447-979c06278543", "sighting--13bc4fb9-5a2c-4978-8c1f-07045d3d3df3", "sighting--f681d099-b81c-4ee3-a53a-5d09d1ae732e", "sighting--c7489c15-447c-4e88-927a-b19c28401731", "sighting--32754fe9-bced-47f4-bd43-10b3b0f42cfa", "sighting--76f751c3-b0af-48fd-9293-ec21568cd5e2", "sighting--f8ee6fb8-6674-4234-b4ef-51f10ed554b1", "sighting--2311addf-7659-4525-95cd-28d3506ff8b8", "sighting--4bed3be5-457b-478d-bca0-8b515965052e", "sighting--40814fc8-6ef8-450f-9dd3-36128e816a47", "sighting--57841418-db0f-4179-af19-904e6ffe29a3", "sighting--40bea728-2ea9-45b2-9150-59ad91c402bf", "sighting--d7d624d3-0a14-4704-b601-f851f8c4264b", "sighting--aece1e91-5be3-41fd-8c28-ed04f880dab2", "sighting--d3cbfc33-0dc7-431b-adf3-39a39f1e1905", "sighting--3908c41b-8b4a-47cf-819d-a69c8b3348a3", "sighting--e1018299-35e5-4037-b385-1380dc649967", "sighting--98197534-9504-431f-be76-96902a5471b8", "sighting--59d3ffd3-5583-4c2b-bc17-f6674e70565d", "sighting--fa4b3225-7ff7-47c6-920c-e42144ebb328", "sighting--6d8c2fce-9021-46c0-a908-d7433be90212", "sighting--af25ec38-fb51-46a3-b1aa-5259faed5680", "sighting--814893e5-c436-442b-8e72-7401d76a2f7d", "sighting--11f9b0ba-61eb-4f0d-920f-8a37c165939a", "sighting--2c663ddf-68b3-45a6-b56c-d01f3d1dbf79", "sighting--3603f15a-1705-459e-83b3-d9f33e33ec98", "sighting--6959e0d1-66ff-4351-a2e0-e043e8bda96e", "sighting--cde4141b-0f92-451e-8147-68482e1c733b", "sighting--3ba9318e-d42c-4f34-91e9-291fa1a69d08", "sighting--c327b2a9-5779-4ba8-869c-7531b9a8126a", "sighting--f612354c-b3ec-4197-b6b0-9a702c7da533", "sighting--c9ef34d1-7e16-4e45-ad45-8ca9409783f3", "sighting--23466602-05e9-4c3c-8ba2-57ba2c7e3111", "sighting--057aeff8-1107-44dd-bf03-e4c3fc15996a", "sighting--d6844c3a-5e30-4530-949f-ec68766730c4", "sighting--9dd635b4-3546-4955-af8a-e4f8a717c5e9", "sighting--91469180-8643-4130-b047-8dab238c30eb", "sighting--f45bc41c-a089-4f16-a40b-61ce8b18a537", "sighting--887e7dd5-74d1-4872-866f-23e879acb52c", "sighting--65aad90c-a693-4394-b294-63e169f66634", "sighting--f5aff97d-74b8-46b7-8707-34868e1f96b2", "sighting--ce50aaed-4e84-4dfc-8bc4-4bf94937034d", "sighting--3dcb6636-722b-4206-b053-2a41879055fe", "sighting--d88848c9-52d1-4a75-8f8f-5b88a0236c44", "sighting--c07baf97-f063-4e04-8c4f-390591b23bf6", "sighting--dd1274aa-b002-4227-9b53-db08947ccfb0", "sighting--7c133d95-1ada-4d5f-bcf2-275dabcc74b8", "sighting--45f34dcf-7aa4-4fb2-adac-e3d0608780d8", "sighting--5cf2b30a-43be-48b9-b1e8-1a427cf32a8c", "sighting--6d78e5de-1b65-4690-9d7e-25f0bce96930", "sighting--bc1a388d-29d6-4510-8be7-9b5ed627dd9d", "sighting--54cb6b05-a0f5-48e0-8348-2b9b42934f03", "sighting--8cc4a2ae-9799-4bcd-a6a9-8c67211cd9e9", "sighting--b3dd8739-0db8-46c9-8e57-ef031d40cf31", "sighting--2593fba8-0e5f-4949-898d-4fc6a5d4d185", "sighting--2df4f813-54bd-46e8-97a8-acfd51a0faf5", "sighting--c633d3a2-5e74-4b23-8f28-62986d6f5599", "sighting--1cbcd59c-9f0d-403b-8a3e-02124be68a00", "sighting--4c487324-f761-494c-89e2-4d36cc32e69b", "sighting--1d87a232-a596-4ed6-901f-7a62d6a288c4", "sighting--ba18307e-a8a6-494b-86a5-0fff7221e551", "sighting--c02658c3-047d-4596-8ac3-e4755a1957d2", "sighting--d3d858eb-0a92-47c9-9af2-3e746f28abf8", "sighting--dc7e1c53-255b-4201-be2c-65a8da481a3c", "sighting--597e45b5-b644-4abc-9a90-9ec1ec5fc162", "sighting--a95e321b-7a82-4cac-93db-f19aa18d8d9c", "sighting--1cce3cc7-6450-4ff9-af05-044b0d5a57f0", "sighting--04d228dd-7796-483b-a6b1-bd92bf9c995c", "sighting--77535830-8b40-4000-ab24-894678caaa16", "sighting--4b7d1ab8-bedb-4bc0-81d3-06f8f8ac1473", "sighting--c3195a67-9001-412b-9409-b98a66281658", "sighting--08a29bb4-965a-4277-acbf-7fe7f22641f3", "sighting--0209162c-b38a-4b2f-97d4-51890d5ee17b", "sighting--2cb815ac-ab9b-4234-ac3c-47045659f4fd", "sighting--85a0db90-2b2c-4f8c-95ea-26bba84c0797", "sighting--e0f0501f-d2e0-4caf-b408-fa563ba627c5", "sighting--8762fee1-01d7-4a01-b13a-ffb89e20aec6", "sighting--3c797f15-1da5-402f-ad95-9721cf431f38", "sighting--82fb39fe-ead5-4aaf-b82d-5d64653baa97", "sighting--00c58246-25cb-4da1-82e2-aed79e652f11", "sighting--c1d863d5-5c60-455c-958f-9e304b3223e8", "sighting--8a856827-83fc-4e39-8f13-36caab58ff3d", "sighting--950993ec-5c8c-4269-8e0d-bdb2ad526659", "sighting--fe28d0ef-b973-4eb6-a54b-fb6b36bdbfc7", "sighting--b0abb6cb-3042-42cc-8707-feb250f5dcca", "sighting--9ed1c27d-b960-49fe-879b-9746cd4b7ab7", "sighting--5231268a-4403-4fc4-8cd1-8d9c644d8b19", "sighting--7df5e882-5c30-4da4-9abb-6b319fde559c", "sighting--1fc82037-b2f6-4228-81f9-42c72cb34a8a", "sighting--aaecdc4a-979d-4080-afbc-1f8c75f5419c", "sighting--490af2e9-e25d-4a36-8f3a-0a453010f6e2", "sighting--dd2f1936-e359-4982-bb74-d3cc0b18746e", "sighting--0bc692a4-a27a-4c32-9b6d-a04971510bd8", "sighting--bd440729-c01e-4161-9152-97d961bcd013", "sighting--b83f6a06-6cb9-400e-af00-3b2b2896cf81", "sighting--08a0e385-e322-4657-b138-6c9d57ba7fd7", "sighting--3be71103-b3ff-4158-9fa5-70b2b118fa89", "sighting--ff916bfe-3bd2-4eb9-96f0-2daa4677b530", "sighting--eb028d2e-1599-406c-8ea0-0c9c2a440708", "sighting--8cba8be0-0d17-4c98-b1de-3e502d1c2bc2", "sighting--2d524dfa-6f53-4147-8cc1-c2bdad094ae1", "sighting--12adb352-9ce8-43a0-8846-2af8f1a6b207", "sighting--1fae33d4-f1b3-4bcf-adc1-acdebece93d9", "sighting--45984369-11fa-4351-afe2-e669f9592ff8", "sighting--fef8b604-496f-4754-8d1a-aeae47b51729", "sighting--28caaa7e-28b2-46cf-9b6e-bb6e7080ae4a", "sighting--b2fbdd08-9a25-47c4-80ca-10aaf6512f0c", "sighting--24505ee8-4e06-48b6-ba50-3ae8b4457488", "sighting--9de26932-ba61-446d-8b40-bc158f95de9e", "sighting--f0dd1feb-8d5e-415b-9466-7bf1c98bd4e4", "sighting--be83494c-91ff-4bed-9e10-c07e2a818063", "sighting--07e59669-ff80-4a57-924f-c2beedb8271a", "sighting--97e92ba2-885c-4388-bb7c-e68c03857890", "sighting--9f7fe0ac-d148-4ff6-ab4a-a46bfcee907e", "sighting--6871f1bd-e201-4cdc-957a-e5e86e057f1b", "sighting--60adae44-d91b-4d08-a96f-d37aaddf20d1", "sighting--71d4d89f-d6eb-41d8-8ac5-e7abaa9200b5", "sighting--88c2d35f-0aa4-423c-9825-b9dfaaee79ee", "sighting--4d925ea2-6f9c-49ae-9ccb-cb4c0c636a16", "sighting--155a7296-e72d-46d0-913a-61990006e092", "sighting--3e922946-770c-40b6-96fc-df81df2fbb9d", "sighting--24a15f6d-b482-4c7a-bd8c-dd7c80e2cc6a", "sighting--8825ab8c-7f68-48c1-ba73-437b3aaf3aab", "sighting--5d5f2149-8a2d-48ed-bd5a-308a6e966744", "sighting--2bfef311-95d0-40c9-ab9e-ab447c1c62fc", "sighting--aa43d55e-817e-42f5-991c-f8b612fcfbd0", "sighting--0809bc95-0273-4f55-bfff-24f52c009d68", "sighting--87b1f836-bb27-4aa2-93ba-5478787d2370", "sighting--f4fd3649-9e23-47d3-834e-d9e74ab3eacd", "sighting--17d233b3-7411-4c11-a326-0f99374aa04c", "sighting--8285a363-786d-4dfa-8d94-5ae127287ca2", "sighting--65e69dc2-b80d-46da-8763-b773a31faa4b", "sighting--cf6b051a-c612-418c-82d0-00e47f2f5443", "sighting--78b87479-3cd7-4c47-8999-e3c42322341d", "sighting--f097e14d-d192-4a6e-85a5-f8b0970a9298", "sighting--710382ca-941b-4d86-9add-7b24fea810a7", "sighting--4fbf34b0-840d-4317-ac54-dac9f0b08d1e", "sighting--fbe9c2cd-04fa-40b2-964e-ec035c75d1d3", "sighting--3d0d83c9-dd93-4762-8f8e-b751549c21f2", "sighting--7effc88b-0074-4829-b839-c93689b014b5", "sighting--194a35ca-15ff-4113-b398-cc0218bb5ae1", "sighting--9e72db07-cc4a-49f4-ab2d-ed87734c123a", "sighting--316e4e26-29e1-4df7-924f-4d8e6c28e05f", "sighting--de5db48f-8b48-4dfa-8487-66a493408cb9", "sighting--cf8ca101-ef30-4380-aae3-9917f8a48ef0", "sighting--a2e29925-a97c-47c0-8cbe-db3cbb17e09c", "sighting--fb03b818-3e29-465d-b531-33cbf498a516", "sighting--5972b2e6-cb3d-4e22-8b2c-84191811f3d0", "sighting--b8a1468a-7855-44d5-a802-0baf2c76ae33", "sighting--88bc789c-cb53-411d-920e-d09301ffe89e", "sighting--0ea58960-e5ae-4df6-8534-9a3f080b6b32", "sighting--877372a6-f7cf-4b37-ab72-5bddf0847f55", "sighting--765e3769-de95-40c5-a3c2-e0b0a94c14d9", "sighting--264a1eae-fc77-40d4-bc47-e58d478295fa", "sighting--5d59c4d6-877f-41f5-a8d9-18e05a711623", "sighting--fb70b39b-666e-4b40-b88c-fa2cf2251968", "sighting--7d35efec-ac14-4ffb-882f-24361b5208c6", "sighting--0a5b9646-fe1b-4adb-b487-4aa0d4b9d88b", "sighting--81d68497-4790-44cf-bb8f-d9de05c7dcb9", "sighting--d07a8bb7-234f-478f-9817-873da2026ef5", "sighting--feb57136-1e60-4f3b-a64c-923de9bc6340", "sighting--5d80cd1b-7bfd-430b-a8f8-d64e6ea0743b", "sighting--73d408df-ce4f-4e42-9d89-32fa03c5b203", "sighting--b8fb6363-e355-467b-94ef-8581f794c262", "sighting--2f1b2326-820a-44d4-8a29-1c2ecae0054f", "sighting--dac5dd94-e787-4acf-85fa-8f787875bacf", "sighting--fc97842a-3915-4141-8fd6-bdd9ea830966", "sighting--d769ec67-678f-4bb4-955d-75f7bd4ea10c", "sighting--57670407-a7a5-4d88-a485-b482aff0e380", "sighting--f8f2d0c3-dcb2-4e39-874e-d9ad67cfb15e", "sighting--1034bf60-809c-4135-bf3a-dd503c6b29c4", "sighting--e63ff557-f0e3-48b9-baa6-7a5f5c4a83ef", "sighting--17bf7603-a0bd-4010-b10d-3d4a3b4fa25f", "sighting--83296999-a9e6-4b67-8178-b1b088226506", "sighting--e0f60b66-acd8-419d-bb68-2073a9862920", "sighting--528f52cd-9cf5-4827-a8c5-12131bcb1ef1", "sighting--a78d3548-7faa-4486-a08f-9887c751a6ee", "sighting--be9f3b00-7ec1-4193-a6ef-cdfa0f7e860d", "sighting--a9cbd36c-2dfa-49e3-b1ea-c8b195a502b7", "sighting--1b4a19cd-4f97-41e1-a445-35905973dbc8", "sighting--72a377fc-f99b-42fa-88ab-daf5b31ebbcc", "sighting--bedfde77-869b-40b1-9aa2-e1e4f97e3cda", "sighting--a9b973f1-753a-4ed8-b020-9f1e9686d3d8", "sighting--a5eff2f6-2d57-4bfd-8303-d0547dce59d9", "sighting--9b317253-b87e-4e0c-bfbf-60d2368658ee", "sighting--c16f38a1-c3a2-4125-942f-fbf5ed2e0a1a", "sighting--b1898bca-a3af-4bbe-9b03-44fb682d665a", "sighting--794a8583-d598-452a-a6b8-c955e73ff965", "sighting--45cecd83-9078-42ca-8217-4458aa7d3d23", "sighting--f07342d6-8a03-403f-a0fb-d7bde0506d93", "sighting--78c09f7f-5a67-4bd6-9243-74e8966d060c", "sighting--62cd2b1b-0826-4cf9-871b-cbef14d534d7", "sighting--2b17a18b-6500-48af-9946-4e411bda9a06", "sighting--769b1aca-9d9b-49d5-8ca9-c543e1e3c052", "sighting--491310b5-17f2-4637-833a-607aed9ac64b", "sighting--e08df8d9-bf1b-4239-9783-052cb02ebd58", "sighting--1b110113-cda3-4ed3-9687-348c0b258fd4", "sighting--c466c8af-203f-4c1d-95e8-5f4944498a9e", "sighting--fcb5241b-8d60-4e86-b0ea-f131934085a0", "sighting--e7542d79-38b5-4ff1-bd29-d0c916e7680b", "sighting--b8a5bf70-719a-41d2-84d6-cea2f7013a2a", "sighting--4161b76a-4184-4729-ab9d-e300f9f6c6d4", "sighting--bcd88c95-6476-4543-a547-ca2cacc343e8", "sighting--70f43b76-fbbf-46c9-9250-0d9bbefa019d", "sighting--36a98b7d-d5ba-4952-9331-11cb668f7e5a", "sighting--515e282b-43f9-4b16-b31a-75c589a73461", "sighting--d432c7e8-88b5-45b2-9ee4-c595356bb527", "sighting--4b237571-8edb-432a-8808-54206cabc523", "sighting--d218b69c-d1fd-4a27-8ebe-ee0c85bfe376", "sighting--a5a96d17-936c-4da5-b88d-7aebe1131782", "sighting--e365755d-2d0b-44ca-869f-21b789b25443", "sighting--b3a7f2c5-60fa-4fcb-8af6-85c6a62d8b14", "sighting--b32f3a12-5504-4056-b0c5-4d9091f4cc0d", "sighting--abc1286d-93c2-4747-b03b-8931563ac5d6", "sighting--8719c95d-9c69-46e5-a971-b9f94c19b4f8", "sighting--b4785085-f0cd-45b9-bd81-a9b9b1bdb90c", "sighting--eeafad89-435d-419b-af01-f77183a59faf", "sighting--ea5c4add-f7b8-4779-86ca-bd44676a7a9b", "sighting--dd0cc0a0-a539-4a2f-9391-38bdc9090de2", "sighting--f90111f0-69e5-473a-b989-b9180c35591a", "sighting--507ac918-a1ac-4f00-9cb1-9914e5a5b7b9", "sighting--c05fd9bf-80b1-478b-a0ab-da96b2e511b0", "sighting--60a0466f-8a9c-468b-901f-8f86731c9f61", "sighting--a040357f-e55b-45f7-9f5e-1eb8b0caf95f", "sighting--511b89bb-71a8-4647-9593-7340f8d35eb5", "sighting--ba387ba8-c180-487c-89b9-982ca4e7499c", "sighting--9a4b19bd-f4bf-4c5b-82fe-028d667a3013", "sighting--94ef7fee-750e-44da-975b-95ff1d50cd49", "sighting--edccf284-d4f8-4dcb-a75c-5450215be805", "sighting--94d037a4-12b4-4e4e-a221-6ec29384f200", "sighting--ec6fa239-0e08-49e1-ab64-afe60adfd59e", "sighting--a7009ee4-de52-47ca-ac3c-afec3c7df07c", "sighting--82813833-a5a1-4e5c-8edc-6ffc948f477e", "sighting--953ba69c-e4a4-43d4-809a-683dd3729e61", "sighting--c9c0267d-92bc-4410-8ed0-708290b8c62c", "sighting--7b242aa7-528c-4bc9-9163-4454cbe64ce1", "sighting--289147b4-db88-4442-a475-3eb75465ccb3", "sighting--e2edd6e8-dc5d-4f07-89ff-faaffd582d98", "sighting--655bdbf7-a3b6-493e-a447-bfcffde5e61f", "sighting--a945e6be-f741-4731-85f7-b7385f729595", "sighting--938041aa-4ede-429d-ace4-be6e1e52203f", "sighting--91c075f6-f377-4652-909a-88c54c3513da", "sighting--9545e113-c69a-4e3c-be3f-fff971b58c12", "sighting--46690d81-48a4-4177-afa4-e3e6b430d0ce", "sighting--44ef7fcd-29ba-4e2a-ab7e-695d771fda5f", "sighting--ac2d1a64-5eab-4c1b-a7f9-f9d4c891115b", "sighting--ffeb0b90-f98d-41b1-9ac3-28454219b19c", "sighting--61ab1a14-8e2d-4609-acc5-5314d628be4d", "sighting--92514ee8-7844-49ec-89b2-982c79274874", "sighting--3e41d529-d674-4a31-9e40-921143af71ea", "sighting--017bf674-0a28-4be6-bdfa-f21f888d3018", "sighting--14cc7f80-5c3b-4b81-adbd-6e2105f32f5b", "sighting--01e744e5-ad80-4009-9cde-06298db03c84", "sighting--824f1ded-fa35-4208-ae6c-e1d91d5b5721", "sighting--a47d49e7-6ddb-4b78-adff-d9ed3c6d1a93", "sighting--c6436cf7-8754-4c1a-bad3-5cb4d578330f", "sighting--0f1f693f-83e1-4b16-8d59-e32928c9e617", "sighting--63b0d6c7-929f-453e-bc94-00b59417de4c", "sighting--897ff7da-4a58-43db-b94a-172793e15139", "sighting--6ed7bf63-30ac-4de3-b260-becdce5d5e3b", "sighting--500ca385-4c6b-48ae-b3b3-44cb5df4cfaf", "sighting--9105334a-4f68-49e6-bc37-7db9602699cc", "sighting--389dcaed-4892-498c-a0bd-4882870d6405", "sighting--d1332c0a-bf72-4f0d-b18a-e7704089d2a6", "sighting--04044e82-aa7b-4509-9c93-b4155f198a50", "sighting--e66a8575-547e-4fb8-a659-de37f29fc4f5", "sighting--19277bc8-a669-4bd1-8b3d-50ade7c640a8", "sighting--99262410-6dbc-47c2-8d79-54e0eb852c65", "sighting--e34eac0b-159b-4592-b266-a135401c7c0f", "sighting--baf2a64c-88f5-4f3a-a648-36de5ab0a390", "sighting--023c9718-541d-4e1a-a00e-741c99ec578d", "sighting--ed357f4b-32b5-4a4a-be49-b46ff54f7f83", "sighting--64077128-3225-40bc-b3cd-8e0a7a556fad", "sighting--f5f0c533-0bf3-4d64-9366-ba0aaf1a0808", "sighting--ab2884b8-ffb7-42f8-b800-c2ec383e9b46", "sighting--b9e6cc5d-e6d9-4ef1-9f02-4798d38fe1dd", "sighting--1c2fd9d5-f8f0-4178-88b0-5c79c14ee8b4", "sighting--a65500c2-1f7e-4ec1-a271-a6d93df5f774", "sighting--c123fded-6aa3-4845-b384-ffd6dc05a1e1", "sighting--839b5429-92fd-488b-93ed-45b27f48ad5d", "sighting--18a72bd2-aae8-40b8-9ea9-d71696e363e2", "sighting--947f0674-8a6b-4d26-ba27-a50e3b46d720", "sighting--3b497bef-8bbd-4fbc-8ca2-911fbf304246", "sighting--c21dafba-bc45-4b43-bb6f-a1a2eebcb1e0", "sighting--a5346ccd-6cfd-4533-89bc-3b1c244d6627", "sighting--6edbae10-b75d-4f36-857b-4c7cadd5a57e", "sighting--6b8558c4-5d26-4b19-aab5-67a60f5eb794", "sighting--93dcf6ea-81df-40e9-95ea-ee338fc10d77", "sighting--0aaea3f1-2ad5-4fe1-bf2b-d9a84f216676", "sighting--d742aeec-49c5-4909-8ae3-3d263c6d3a8b", "sighting--53fde42f-816a-433e-b129-035021f4e2ef", "sighting--189d949a-6f73-4a3b-9eb9-2633189b1aa0", "sighting--beec82ac-49eb-40eb-89ad-9ed3e0570784", "sighting--457c55a0-ac12-4a6f-a102-760e6a9da3cf", "sighting--2f093a39-761f-4e31-9567-ae6a19b8a743", "sighting--8f0ae7df-1d36-4f06-a334-26976ba867e2", "sighting--62495420-1088-437b-9500-5c7765ac62cd", "sighting--89e3d989-caf8-4079-b65b-5d5d58123827", "sighting--54afac38-c665-47e9-947d-ecfeef4495e9", "sighting--ddfc3ba9-2587-4c02-b8b8-bd5fa25728de", "sighting--30cdaa6c-67c7-4a7c-9a4f-8e8f1a2052d0", "sighting--8be60f0b-8dff-4019-bec0-803bf67fd431", "sighting--149f331c-7d10-4539-96ad-e15f7c53550f", "sighting--19e72946-1288-4bb8-af4b-89cbd2f24793", "sighting--dcc3681d-b072-48dd-b715-1d39fd9fbba2", "sighting--55990fa5-920f-4756-9a5a-87fcd8c8bc13", "sighting--760b5f3f-fda3-46f4-8f91-9ef2c1915234", "sighting--485b87ab-e91f-4723-9135-31b1b85bca6a", "sighting--03cde613-16eb-4a98-a5f4-eda728333c0b", "sighting--3e37db76-2005-4254-9515-c3d095469cba", "sighting--3f5cbf4e-0a67-4ea8-a331-df67ea5e6998", "sighting--0f8df689-b59b-41a6-bcc7-14b346eb6964", "sighting--8cd9acda-7e88-4e17-93d4-e6f443f84ad0", "sighting--b4dd38ae-c0c1-437d-8c4a-8afbe0b99d70", "sighting--40b81b4a-0769-4e44-95ea-c54f04706fe8", "sighting--e71dfefc-2550-49fd-9472-40842189e844", "sighting--f6cd7ad7-12ce-4114-afa6-897ce829d786", "sighting--b8e3c0b5-dbca-4fbc-b897-c9b081cec65c", "sighting--ddf97f0f-bc04-441a-b7e9-971500b9ffe9", "sighting--1c7b89d8-f9f9-482f-b037-67afd6a25090", "sighting--fa260d1c-6fcc-4531-bc56-5204927e02c8", "sighting--0f5f3231-3d9d-477f-b41e-e4842e0e924b", "sighting--d0d821c7-a896-4f78-a6df-b523d22618d6", "sighting--fc45cd0f-906f-4a36-83f1-ef6ade0f43eb", "sighting--d7f95ad5-c045-4f1d-98cc-adc78123d0a8", "sighting--b191deb0-eb21-456d-8e18-067c92472868", "sighting--da13d8f6-6c26-43cf-b935-91a6f047ffcf", "sighting--a83c675f-694d-4021-84a7-03bac69dfb4d", "sighting--1c62c31a-9667-4b36-bf8a-cc4f64423781", "sighting--0eea4589-9a19-4e3f-b4e6-191e75f33e9c", "sighting--206d9d58-abb5-44f6-a4d2-8260d8bc1f1c", "sighting--956446de-0761-4706-9c4e-1aee7b3b0ae0", "sighting--cb0e4d35-2c54-435b-979d-a9c311665e89", "sighting--1dc96ea8-47b0-4a17-8e12-93328e65b413", "sighting--254678fa-370f-4c65-94e8-8833c0c0010b", "sighting--393337f4-d5c2-4127-9730-b3361256b533", "sighting--68077df3-c098-4f92-803b-172cf5fbedba", "sighting--7e1611ff-c7db-49f8-8c26-ef0ff1d292e9", "sighting--aeaedaf9-b1a2-43e1-ae81-4a63ef19929a", "sighting--ebdecdf3-b60c-4253-9389-551659bcb1a4", "sighting--316634ad-f39a-492c-9f40-22526da4ce03", "sighting--fd04aa50-e4c8-458b-8d2a-d2ab84177a14", "sighting--ce1acaef-42d1-403d-9019-e3db42cff163", "sighting--698b4658-83d4-4c4b-9957-73a97f6519f8", "sighting--d483df94-bb97-475b-a790-8771bb3f535c", "sighting--4d48c586-aa93-4ed0-bbb1-a619c168a9a2", "sighting--7944e328-978a-480f-8b8c-fd54adb1554f", "sighting--b0f6ac5b-0bec-4a72-b287-d8a1d744e807", "sighting--ec2d9653-7020-4002-9009-87fc57a2ba3d", "sighting--ecd054f7-cfeb-4eeb-878a-f217a8236679", "sighting--b19ffa6e-00f1-4425-8a23-4af70710cd83", "sighting--cb7cfe96-0c89-4dfc-847e-3ba7d14cb467", "sighting--2a5f1321-2991-44fe-b500-81bf52f1165c", "sighting--cb4f6006-48da-4583-8630-8e4931d5a649", "sighting--445f363d-7d6c-43b2-a823-e02a4ba548ae", "sighting--80cf1db0-39a0-429b-8a33-2b32550b14d0", "sighting--1a06f177-d217-450f-9f0a-0d05337003e5", "sighting--7d5f5fe1-f633-4e03-a29f-bc19fce14570", "sighting--21c8ba6c-4f21-40bc-b309-83bf11e67fa3", "sighting--57a25a4e-8987-4213-b3b3-dd61b086c164", "sighting--e05e7e8d-e198-49dc-a72f-24ead455924a", "sighting--93326b51-15ee-480f-8e2e-5b95ae08d0a0", "sighting--21afbda0-1e1d-4b01-b701-cc877fc208ea", "sighting--5f68423f-03cb-456d-9c33-32890dd23b69", "sighting--a987fdab-7d7e-449c-b514-8ef143a06b60", "sighting--d838b9bc-a735-4b7f-a9de-323d223d6c51", "sighting--34401ffd-3f89-49d5-83f5-5a2c029b9d06", "sighting--32999ccd-4288-4065-adeb-85d66451be16", "sighting--37826c2f-b340-45ce-b38b-e5337b6dd6e2", "sighting--08e8c86a-8e8d-43eb-a80b-c10aba1ede50", "sighting--46294ecb-44ed-4e0f-9557-11662cce9bca", "sighting--627dd950-d626-4114-9800-045688e2edd1", "sighting--9bc7274b-0aad-48eb-841c-fd16a359290e", "sighting--b91c231a-84d9-4ee4-9de1-f22de2d5a757", "sighting--43394484-8795-420c-a872-d0d6d17140c9", "sighting--df5ef63c-2862-45a2-b908-a695f818bc83", "sighting--d59fa3f6-c956-4e53-833d-7cfe2d200f67", "sighting--96dac16f-8285-4dc0-a9a9-0aa53ea7dc24", "sighting--9779459d-e5d0-4a00-a516-5fd83805697b", "sighting--a5cae11d-3f75-4395-848e-9270c6fcb08a", "sighting--e7873099-528e-426d-8774-7c39e1b101b4", "sighting--6d1c845d-9b6c-4970-8e1c-1e5f4403ffa2", "sighting--14adcb95-a9cb-4ac9-be53-2ab273cb52c1", "sighting--4d65cdaf-4c75-45e5-ae2d-b6967137e645", "sighting--ee7c446a-f4a6-4e88-b9dd-f0a2c124b5be", "sighting--aff3daee-54a6-4103-b0c1-66e406d282f7", "sighting--766168a4-432a-4322-92d5-6184a8988a7d", "sighting--4e1a5996-3f50-4107-9059-1809e4827221", "sighting--c43be677-efaa-458e-aba2-8f9c3e6f3928", "sighting--d9f7944d-f59b-4149-a192-085dcc18298f", "sighting--33593d7e-d8d2-4696-8d93-678d27bf5edb", "sighting--b83764b5-6806-4c92-ab63-ac182a13fe75", "sighting--19913502-95ca-4d23-97c7-8a005661eb8d", "sighting--d7e8086c-ac1f-4ba0-8027-5645f947e807", "sighting--45f92558-b953-476b-854b-40fbb72e6d74", "sighting--d8286c4b-ad05-4a03-a831-99a96e139a40", "sighting--626234bc-b1a7-4f83-b7f9-ccaa0d6651a5", "sighting--43c76148-a6b4-4fc3-a2c8-c914e0067031", "sighting--0e85cae1-229f-4d01-afce-53101781838d", "sighting--8ad38ff2-86f4-4222-94ce-f26e69a85659", "sighting--1dff9ee2-f689-4d76-ac4f-06c226733c95", "sighting--11286ef6-aa4b-4d44-9e49-88adecf8ae65", "sighting--1de7ac6c-dd20-41fa-96e2-b0c174994d90", "sighting--c1004f98-920e-4c98-9390-42705dd6d822", "sighting--335f0ef4-6a73-4563-83fa-f08593ae1325", "sighting--a9192198-c4be-433c-98dc-6737bdcb53aa", "sighting--1bdf70f1-b61b-41bd-966a-c0d0216fa20f", "sighting--e6b00f3a-c66d-4320-a075-970a0dfa3293", "sighting--db7c378d-1e19-4f16-a032-30732dd71fc8", "sighting--21dd5531-438d-481c-9406-bc031f4d63e2", "sighting--ea474956-70df-45d4-86e5-012c82b5427e", "sighting--212f1558-f0a4-40ea-9f3b-e121644d7552", "sighting--e8666337-0337-43db-a2b5-7dfde02907a9", "sighting--dfec5459-7ce3-4b76-a2dd-e2ed72e55bae", "sighting--08cbd0a0-0bc2-46af-b12f-47475b17c764", "sighting--ab85aa6a-f029-4e92-a64d-4cdad0d8dbe8", "sighting--ce1a1cea-02a0-4514-8e5d-954c8f2d8f47", "sighting--3955c580-6a98-4154-8943-15bda4fb723d", "sighting--b256f46c-d5da-41c2-812c-0dad82cc6114", "sighting--119a46a7-2c6a-46e0-9634-af78537ef2b6", "sighting--ceddf381-a4da-4957-be0a-daef5b3cc4ed", "sighting--a695ba59-02ec-4329-9dc3-2e15c54bbc39", "sighting--7f301f55-ed5c-4ab6-b9cc-875fb08c7300", "sighting--1c12cc80-ce27-4058-ab2d-42df0eeb3332", "sighting--2b9f56d6-0d1d-4530-967e-a2ba105155cd", "sighting--deebc734-28bd-414b-ac95-faca94aa8127", "sighting--fd4b6571-0606-4723-a12c-8b315d5d7dd9", "sighting--266ab7a5-36a3-483d-8526-7268e6e69a1b", "sighting--8cf62005-a77c-49a3-8533-f908a0527744", "sighting--2ace232e-7f4b-4c6f-913e-4bce18f5964c", "sighting--2a8c2c18-fc7f-48a1-bdef-a5fe18c9d8ff", "sighting--859fd5fb-81a9-452d-b52c-0b2aded2c4b5", "sighting--d0a1c3e3-11ea-4065-83e7-ed24dcb114fc", "sighting--4a8cddb8-a8d8-45a4-a59e-5604eebd4b68", "sighting--90be68ef-a4bb-4700-ac41-144f4420e25f", "sighting--42b635cb-3d0b-4e3e-8b10-c06e07985b43", "sighting--ef5a36b4-db2a-477f-bdaa-53e3afd5a16d", "sighting--c0f15211-4b5d-45da-80ec-310939bf0916", "sighting--54a27399-d0a9-487e-854f-8115aad67f09", "sighting--c713d873-6f46-4cbe-8bf5-6d71bd7eea8e", "sighting--3671a202-099b-4fd1-b359-7cf7c65f1b36", "sighting--45d5babc-08b7-42ef-8df1-021111c28006", "sighting--f762bfdd-5071-4ca2-aa6a-f4fc0cddfe4d", "sighting--42bc4f7a-29f4-490e-b6a7-a9324cbb8d0b", "sighting--d53e36ab-8b6d-45ce-b7de-1021460d5771", "sighting--8ed295ab-4271-46cf-b0d7-6628d1767e60", "sighting--dd66bf08-98cb-4696-b958-2c7cb3f1a772", "sighting--23ae6caf-f706-4ddd-93bd-38df120f0216", "sighting--dc1cfbbb-10ca-4dae-9fbb-ece4fed6c3cd", "sighting--a3ef4ffe-563b-41ef-b4ca-15c141df0d9e", "sighting--d51bce94-b53e-4c60-b2ce-470fe394d515", "sighting--d8571320-9e41-4b24-b96a-e9d63b17f552", "sighting--ca3354e1-a820-4a3a-8a5f-2dd5ac14ce29", "sighting--c88e1938-969a-4dbb-a698-52d0645b72b3", "sighting--8ab565d7-deac-4ce1-b896-19c7960a4998", "sighting--1cddaee2-f155-4f5a-94a1-14d2b36f20cb", "sighting--c7a90a11-615b-4d6e-8625-e57918d9e1b9", "sighting--3f959412-b894-459f-9c5d-85d95b6c287b", "sighting--4e739742-de2f-48dc-9712-704ea63f5295", "sighting--77f9c6ba-12a0-409a-b128-14dac9805759", "sighting--f9fea59c-21ad-4c50-8dae-28a91b3d91d4", "sighting--9b7d953d-6ba9-4b0b-9fb5-e50d3c65dd89", "sighting--f6fd90ce-e15c-4cb8-a004-752c68ff962d", "sighting--5cc8f3cd-c6bf-461f-9b77-ad7ee367c383", "sighting--2b85a9c7-2339-423f-b2ed-fe055dcfbf64", "sighting--da02897d-7ac6-4c8a-a0eb-b5976900cb29", "sighting--92e87cda-cfa5-4525-9a2c-93614661245e", "sighting--0a0652bb-2cc3-45c7-8792-f96ad3a3691b", "sighting--1073845a-1352-409e-ae3e-1aeef8d4e29a", "sighting--c40fd3b7-dc0d-4b03-b0fc-91a63b6bc090", "sighting--0b68818e-fe4a-41b5-9703-3ce4f70e2abe", "sighting--aa8144ba-b804-4d19-a447-fb9915221934", "sighting--e2e267f2-c23e-4c54-a7fa-ba6b6b1e48f0", "sighting--44600ec6-a234-4101-b80f-8555c51a67ed", "sighting--0243d358-8643-4204-9ab7-11f198658873", "sighting--30a242ca-8a02-4356-8c30-d37bb700cec7", "sighting--297ac6dd-d500-4f54-a97c-a025a41c303b", "sighting--c97de883-e29a-498b-81a2-54d9518a4ccf", "sighting--87abfad0-975d-46da-b4fb-ea0c11f85ebf", "sighting--664b9c27-8870-434b-80fb-32456f11293f", "sighting--0ff2c802-5bab-44d9-9134-4142472a3e99", "sighting--b408ed28-7c29-45a9-aaf4-de42b538c1c9", "sighting--0af33fbe-6957-47ae-a758-b76fc1165b60", "sighting--b9775664-2494-40ab-8729-5b0130058d11", "sighting--6a24a4a2-b2e4-475a-81ce-b3ced39b7748", "sighting--62989cc7-6a58-43a8-9c89-3f7f6c10bd65", "sighting--386a7fa8-9800-4616-87d5-da0004ad8561", "sighting--1fd65917-6c87-49fd-9972-42b081f841b0", "sighting--c809ecd0-9770-4283-9490-041a0686e4b5", "sighting--3641414a-7fe5-4e1d-bcf3-bc145147cfbc", "sighting--467d636e-353b-4257-9b35-924296f713c2", "sighting--834735fb-6198-499a-a204-ba08db1a5046", "sighting--8ef5bbc4-7d7b-42d8-a714-da0aa478836e", "sighting--75faee15-fce8-4da5-8987-87dbbc2d42a6", "sighting--f82a6631-1cfe-4f5c-af85-c0031bafa402", "sighting--12ac4b01-f2a1-4055-b9be-6bf1ac8130f8", "sighting--9c457d6e-a66b-4577-8329-151f80b46c39", "sighting--54d0fc5a-f29b-4dba-b53f-9a624bff4473", "sighting--a5206d7e-7f06-47da-a346-a0c02e75d8be", "sighting--b07e5869-fabe-4907-bce5-cefd78e048ec", "sighting--13df5745-9f2d-44d7-a515-e02a0627d539", "sighting--73cfcb45-4526-4974-97ed-99d11b2f1ff6", "sighting--eb303c2a-0bf7-4386-9404-17502090779a", "sighting--558b7103-cdd0-4e47-b1df-dfd91349dac3", "sighting--b7858ac1-502e-48e2-b84f-c8ab2975870d", "sighting--029638a6-e8a5-4504-8d1a-ac45fda50e9a", "sighting--bd7da7a9-f945-41ee-a75d-57c4d9f90a2d", "sighting--485ba20d-64e0-4d5e-bdf5-5f8fa5bfa84c", "sighting--4f0dea70-3e75-484d-87da-95e34d34bc60", "sighting--29f2b5ab-0cbe-4578-8b19-71fcc83e18d8", "sighting--b9d46c89-4c97-46a5-9af7-a87039131a6e", "sighting--1e54035f-a2b4-4ff2-9c43-8b029b57a82f", "sighting--c2a83f08-61d6-4889-8a38-1c89c6410bc6", "sighting--3e27240f-75c3-4a42-b7d8-757283aa765e", "sighting--c24db665-df6d-4544-8a41-c74e28e9f83b", "sighting--4b466639-7874-412e-a896-0f0dfb555de4", "sighting--f9c2b553-20a6-497b-a663-ce9664d0e8af", "sighting--4fc351d5-412c-4561-adef-d3e77f7ef2b5", "sighting--d26fb5fd-5c74-4c64-a7db-cd0ad403df0f", "sighting--6106fa8e-e909-4c44-bc59-674e139c31f5", "sighting--b953120b-86e5-4a43-adca-86f0885efd99", "sighting--31494033-e735-4dc7-a13c-65b7be994945", "sighting--31d2eade-f79a-4299-bfb5-33210f418e3d", "sighting--397c2a33-83d6-4b0b-ae11-5fb05e672193", "sighting--a4a5ecb8-f400-483d-8621-2f3e5f103430", "sighting--ec246b0e-0104-4461-be80-89114857a45e", "sighting--9696667d-1a87-4db8-a2aa-54c4f11d94b0", "sighting--2b5cb904-91b4-45c5-9195-881ec593b0b2", "sighting--19980e6b-10b9-4333-b77c-247a22fecf0b", "sighting--d0f36af1-6fcc-430c-8cf1-ab24cc4472d4", "sighting--1b15fb12-2501-4820-b0a4-30606e9fba70", "sighting--0e009ab7-178c-4b31-adbd-37f2629533ed", "sighting--c03e3535-f696-441f-b37b-809aa313b05c", "sighting--006f02ab-1545-41ed-b456-a7346e42a273", "sighting--2a902d6d-8208-4f43-8117-2f2d1756dca1", "sighting--78c1c02d-1236-4705-bb3f-5a648b76e8d9", "sighting--f4a4dc9b-5b66-45a1-8710-7328562e1dd9", "sighting--62b468c7-e5b2-48cd-a86e-d5ba5572e01d", "sighting--d2399fe6-41dd-4750-920e-2cb2728c68f5", "sighting--bbc5dafb-a0ed-4fb2-96c5-45bc53e3f493", "sighting--8c4d4478-814f-42c8-869b-5f033655f485", "sighting--bb0e22a5-fb50-41e1-b466-3975f603d793", "sighting--11e3792a-92ea-4a96-a123-4c6481980d0e", "sighting--2b9731e7-0ba6-4a93-868d-2d38197f2044", "sighting--2904ff84-ef2a-4989-a3d3-43ac9df8a88f", "sighting--a3cbad72-4742-4332-af56-dbc3790608bc", "sighting--10f6d043-491e-4e85-a778-5933c640dcf9", "sighting--cb2acaba-3733-44f2-84e5-35530c68a4a1", "sighting--9b440857-9580-47fd-be5c-7f79785ede79", "sighting--1d9a4dfd-fd54-41fc-aa06-72ae4ce81815", "sighting--9db6b6cd-840a-41d2-b42f-97b160bb9a8d", "sighting--9e7b61cc-bde3-41c6-b6de-7910249ff5c8", "sighting--528d342f-7a30-4ac6-a50d-de86e2719c30", "sighting--7999f70a-d406-49d6-b122-51c2b98de48b", "sighting--22766a5d-69a6-4c34-9d6e-1b0c7f77e118", "sighting--ada50da6-116b-45e4-90ba-72776001a6da", "sighting--d99c7aa4-be99-49a4-8802-2ea5acdf4723", "sighting--1f4b4c17-b463-470f-aea8-d658875f520e", "sighting--241153eb-de4b-48df-a0eb-9e50a88e705a", "sighting--dc837695-1c17-493e-bc7a-58a1fc8b1fd4", "sighting--aa43a4ec-8009-4d84-a866-eca518b132dc", "sighting--335c0540-5594-4afe-90b9-55c33a0367a1", "sighting--def311d7-12ca-484b-b91c-eb57bada2a03", "sighting--e5827b22-299b-4d1b-a19e-3dea28e2c6e9", "sighting--4ecd0a8d-236f-4d15-a66b-997f5be9bd57", "sighting--028aadc9-9668-4912-943a-20f2b7ba6f7d", "sighting--18e8a659-0919-47f4-83b0-0af8e1217890", "sighting--cfe33fa0-3d26-4f92-8f39-0134db4612e3", "sighting--d3468471-ee81-4076-8f8d-6383b3c3e948", "sighting--2718eca8-6096-4bcf-be67-db344d688566", "sighting--e9d5e064-3c5e-4433-8cb6-98957749eef3", "sighting--75500816-8cb7-4c22-99d3-a1921cd47f06", "sighting--9b109667-a71c-409c-8751-add46b7cded0", "sighting--659be321-f41b-4c63-a85c-e9077c1c410f", "sighting--9e07b72f-bf7b-4fc4-9837-2c64466b8848", "sighting--c392c8cb-d159-468c-a7d9-bf89db6ccd04", "sighting--8de030c2-5eb0-46c3-937e-a00371eac703", "sighting--11a84304-7c80-465d-a89a-1bf41467b4a3", "sighting--c0056b18-f406-4d7b-b907-4e6ec113726d", "sighting--8185cbd1-f2cb-46df-a45a-645bbc0111fa", "sighting--72c3781c-59ed-461d-b9d0-42792236d87e", "sighting--b6e4e16b-5768-453a-b645-41e1bd20ae0f", "sighting--6f2c01eb-c637-419d-a946-0aa858abd08a", "sighting--a2f7c21f-70e0-420e-9a40-f3e8f127ab84", "sighting--ec0664be-a716-4f70-ad3f-6c538795d346", "sighting--4fed7a43-5e70-450e-af56-515052c4b807", "sighting--801acb01-86cb-46ae-87f9-98be786d5f2e", "sighting--7376dbb4-8199-48a3-9ef1-d5d73add461a", "sighting--ccc5df1b-c43a-473a-aa91-7a39855967f6", "sighting--603048c6-add1-42c1-b39f-bef032c135b8", "sighting--70f8e45e-faae-45bb-804f-0e3074ab900b", "sighting--d0fcf59d-46f7-4d6c-9135-225ce185e44a", "sighting--8438b65a-3435-4919-9ab9-4ed13308472b", "sighting--8173c213-9303-45b3-b2f8-d4ce1e8b8661", "sighting--4fe84647-f138-4e05-9dfa-2e1a38dd7c2e", "sighting--723c6d87-db87-42ef-8764-07e8317db24c", "sighting--117804f1-38ca-49a8-b326-5b61516bf6b3", "sighting--eb40769b-a693-4218-8239-87a7e197d1ff", "sighting--d5381fc0-60e7-4fe1-9199-ac4d703a2644", "sighting--088a27d8-4794-4d7a-b692-4dc6d400ddfb", "sighting--fa32f491-b937-4708-b14a-585e5302c927", "sighting--9c8b5323-593e-4956-badb-4e25df88ffda", "sighting--ab1a585d-938d-4da4-b7c9-3cf497dacbd7", "sighting--8c45aa7e-2aed-45cb-8ee2-b8ef465a9125", "sighting--7e446b11-be7b-4bd3-86d8-845b57fc61fe", "sighting--4425d2dc-7160-4bb2-9a16-0c08f0e99f9b", "sighting--2bfca948-7e02-4628-9afb-ebf060351ee0", "sighting--0179ba3f-018b-49e0-b1f9-17523a20c995", "sighting--0f929409-43d1-4461-905b-7259a117f2c3", "sighting--7b36d80e-517b-4229-94f7-63b31265a9b7", "sighting--1bfd5b76-c700-4477-9a27-6b09106ae69a", "sighting--13797e59-49b4-4bc7-b147-2c693b9bec16", "sighting--043afe31-581b-4d65-a9d6-5010d6229105", "sighting--a6368cad-d1c1-48c9-bb41-8a927149f5d9", "sighting--1b7f854f-1d9c-4096-a77a-f7f46b5c2448", "sighting--70df0553-3fe9-4fdf-9c51-968f9ea76980", "sighting--93b5fa15-7897-4ec1-9608-1377b55d76ef", "sighting--73a38ec7-5a3d-44cf-bb03-e24f2c90149a", "sighting--c0b35cac-f29d-4307-a718-19240c592681", "sighting--a15d596c-0707-4e35-92c7-79dfa72e73c4", "sighting--11001ecd-4e98-4041-9643-4c10677979f9", "sighting--d7905884-1fab-45ce-84a7-365af0387e90", "sighting--aaea4694-9a88-421d-a368-feae9755f6a7", "sighting--5753754b-314a-4942-8e13-896842390221", "sighting--c571af18-935d-45dc-8ca3-587410ae4c27", "sighting--63264943-725f-433c-8b10-82a79945d90b", "sighting--7d1cdbc9-fa2b-4f78-965e-f634ed471469", "sighting--f8cc28c2-0b33-4544-a585-a7d89be87324", "sighting--793affe1-d541-4ef1-a1c5-df2d741d617b", "sighting--60d0f4f4-7e53-47b0-b3a9-1dafa7d34485", "sighting--40b265f7-5f20-4bb0-a1f4-07715a8e3704", "sighting--88ffabe7-9b46-488f-acbd-872dd743a0a8", "sighting--e3cadba1-0448-46af-96fc-6bd9198dcc2e", "sighting--7e5aaa76-33fc-489e-9b7f-7d1776548cc8", "sighting--10423a20-4219-4ec1-aefd-6167ddae20de", "sighting--866e6a76-4a1e-41a4-b8a9-cab92f181023", "sighting--d1edc025-8abf-4b91-b298-de508b0a6cc6", "sighting--3e074586-14d4-4605-9b71-b5e252868afc", "sighting--bae50a8a-d7f9-4e53-9113-68b90e17913c", "sighting--75c8078f-6c33-4a6b-bf72-39bd6a6f38bf", "sighting--feaf2afa-6c58-410c-b116-e2acc9ad0a55", "sighting--db8e01e5-6563-4405-83aa-7c8634622196", "sighting--aeb92c72-eedd-402d-aac8-41f1fc861db4", "sighting--efff3bb1-15bc-4002-b781-9fecd7912c39", "sighting--ab9db937-2450-489e-8428-5c16e740a7f7", "sighting--d99e00c5-e037-473c-9eb2-1080ef5d167c", "sighting--c7d5af2a-1a13-4c93-86fa-06dbfa7cd038", "sighting--0554d925-8aff-460f-9695-12197971b5ec", "sighting--2c8d3405-55f5-4442-8e25-45cbbb0cddbc", "sighting--f207c202-4e86-4ab4-bcb1-d4638f53bcf4", "sighting--e555f13a-5164-4496-9f85-277080f1a2fb", "sighting--edc137cf-4e55-4908-be44-846df849d9cc", "sighting--5554cec3-69b1-406f-ac02-0650a17cdb39", "sighting--3a0adb61-52ee-4ade-b11a-0758f9ee9ce3", "sighting--bdc0aff1-267d-456f-821f-4b0c470d37ff", "sighting--1ce0ddcc-7c57-4e83-be5a-4d087e8968ae", "sighting--99bc2663-582d-46d0-9627-350ddc803761", "sighting--1edfadcd-6052-4095-9997-09ca4df91871", "sighting--ea6d391a-c95c-409c-9ecb-dd28a566bb4a", "sighting--44cd726d-b79f-4bc6-995d-819c7edf4432", "sighting--f167f632-21ff-4e2d-ab65-f7232b5610c0", "sighting--38f0e319-781f-4f37-89a2-b0cb086c63ed", "sighting--8cecf631-3d86-49e0-99e9-2ea284623f51", "sighting--079890ad-936b-49cc-b601-434880161e42", "sighting--afb0f2ab-26a6-4648-98e3-852e7d844dcf", "sighting--a4903c1e-c82f-46c7-ad80-e67e48ab6deb", "sighting--ac2bc217-f943-421b-8f1f-1e0db71d0d7b", "sighting--87ac2365-1e90-4d1a-b878-3a11d0ea39d8", "sighting--07347a59-33e2-4448-849f-31b8fe87fc8b", "sighting--662330e5-9f2b-412e-9394-0ac58f9d35ee", "sighting--3403def1-fc88-4b46-bab5-b214e37f2b3c", "sighting--00890f1e-3afa-4a9a-bfab-7ec153674284", "sighting--3e3a2ff3-5d23-44e5-8b2d-870478f490a8", "sighting--d2bbecb7-983c-40f4-8880-dd8f02280c41", "sighting--c229b188-09b0-4607-8266-00b665f116f6", "sighting--dfc3a505-e900-4f8d-b559-fc7d9f8b2429", "sighting--7387fc53-fdcb-4ae1-91ba-a346fe283a9d", "sighting--2d7dffe4-718d-4b7d-b11c-041a849f438b", "sighting--75a1f4d3-8f37-47b8-99ff-9033f79b3c0e", "sighting--71c5ba30-1199-49ad-b3dd-442fb4ed7595", "sighting--2cb1b190-aeb6-48b9-a14e-74db33d15dc5", "sighting--e00c5849-fa98-478c-96b4-f679ecf3236e", "sighting--79efc46b-7021-4896-bc02-a7bcb13fc8cc", "sighting--ed71d4db-3321-4b39-b219-fab8b12dbc76", "sighting--20056ecb-482a-4f83-97ca-8f1ad57ed317", "sighting--d13bd7c6-a3f2-48ef-8534-a418e475120d", "sighting--4b16236a-c86e-47e8-9136-a5b6a7741bf4", "sighting--bb0a3e89-cd49-4b32-b272-735fd21abf3b", "sighting--63b3760c-f7a7-4953-8060-36c3ad6c4931", "sighting--5c3e3e7e-a7df-4ab8-9179-eedd4fef4b68", "sighting--b7b545cd-ad59-4d1f-8484-f492327e210c", "sighting--2a7d9f14-29e3-4746-a2a9-1ebf1db2f5f9", "sighting--abf039fb-991a-4467-836e-5e485551568f", "sighting--cd400b20-5e1a-4d5e-a95b-081263d34854", "sighting--c20f0153-a5a5-447e-ad7f-09d845f70b7d", "sighting--11b0dfa6-2deb-4f7e-a40a-5720610976c6", "sighting--6a693d79-f13b-4b99-ba1a-a19e72ac708c", "sighting--fb637ecc-c210-467f-998d-3d08f152262c", "sighting--47887c18-1009-43a1-b984-d1bffbca61e6", "sighting--50770040-448f-4950-8713-a92ecfac9a7a", "sighting--dae3093f-91e8-4461-8f33-da2663585eed", "sighting--38e6d347-eefb-4272-bbb6-1dc9c43f9ede", "sighting--5a0eff9c-4615-4c5d-9c4b-e66e39703879", "sighting--1f848bdc-5e14-4c19-bfe0-9cb824c0e7fd", "sighting--bfe1d2c8-7cdf-4de2-bbce-157fcd2981ac", "sighting--38b6ced8-1df5-4998-9e48-513a4489a021", "sighting--488ba71b-263a-4ba8-82f8-11f512d10290", "sighting--f486b3c5-7acb-4e8e-a3aa-3f67b02a14e0", "sighting--ee29b9ff-3551-4c6d-98b1-9110fb6c2012", "sighting--235dbb9b-b3bb-410d-b090-a5b1233e48dd", "sighting--85825a64-fff4-45e7-9c50-d17af96271b0", "sighting--7a5a6bcb-377a-4782-9526-0ea2b3113918", "sighting--acf44770-2380-4974-aa25-aad7851a0aac", "sighting--ba7ef85a-6a12-470d-b718-b3759480399a", "sighting--24420632-a7c7-4fa6-9cc1-d14891ac8c79", "sighting--f8218b53-7c02-4d51-9dcd-5e36a369cd73", "sighting--c1068dfc-1aeb-4fda-be45-f4f6d2f7650c", "sighting--8fadbac0-88c9-4b50-accc-f178cfa038a1", "sighting--822dc03a-2011-4b61-a5ac-5d50b8b6543c", "sighting--ffe53eeb-6331-4307-b0a0-6d84ce0dafab", "sighting--d07e2791-48e2-498b-934c-584dce2deb82", "sighting--8a780ed7-054f-47e5-a599-9c9ac1acf1c8", "sighting--36df4b7e-6c8c-4fff-80d6-2fdf469c95c0", "sighting--fc2315f5-a40d-4a88-94f0-d606da3ac17f", "sighting--92b5eb42-27ca-4d47-8160-780961a761a3", "sighting--121d31dd-5777-4685-85e1-70007a45a1fe", "sighting--6d16e4a7-50d8-4a13-9b92-a547b1d5e887", "sighting--b07edbd6-f34b-438c-bfd6-744d0d9b6f30", "sighting--c40c7b2a-f517-40f2-8af9-434a817d778a", "sighting--f1543fe7-89bf-4b51-92c3-f05c215f2bb0", "sighting--fb67cc08-fdf9-45c6-bf74-7235c926f0d5", "sighting--b8154d64-efb8-4b38-9491-b701b8e923b5", "sighting--b9d9e163-54e6-409f-baac-c1a479737289", "sighting--64e96e74-97a9-4355-9479-7e45be9e7973", "sighting--7ea058ae-407f-4c57-ada2-41f3a7f36a5d", "sighting--dd15038f-e2fa-4d9b-8041-deb99174f063", "sighting--887ed71c-810e-4159-9987-a96d85323e7a", "sighting--a314a56c-08ec-41eb-8b35-4fd2968f910b", "sighting--09ed368d-4c7f-4c4f-ac49-63ed4f90a7fc", "sighting--1c5d9c4c-f512-41f2-9cf8-d8e779c2e55c", "sighting--655e1bcc-a907-44e0-8221-dd0a5123726e", "sighting--b732ecbe-7b67-450f-8853-02b1ee21d113", "sighting--b3aaac1d-1377-4fe2-8100-b179e2770c63", "sighting--bc4cc220-0e86-475d-a3d6-f358cc6dc77a", "sighting--854586a8-5479-4b3c-8137-e6b5b3f22c46", "sighting--6aabfd3e-ee50-4fb2-826e-f83ad7642ec1", "sighting--1c33ddba-77f1-4a86-8382-8ac4e8b4643e", "sighting--f8276bed-ae8b-43b5-b355-cab1b0351540", "sighting--f723b0fd-3396-47b5-b900-8dfd1b2d9add", "sighting--734f217b-8ce2-47e8-9fae-59d0c01c1a5f", "sighting--4ef9764e-d053-4655-9a8c-ab86901ca737", "sighting--f6bad9dd-0899-48e1-8e32-156ef993c082", "sighting--cf52e21a-e91c-496b-b857-a9701f02de7a", "sighting--479bb409-3acc-4638-bf32-e77626d141f0", "sighting--2e5caceb-57fe-4ff9-8be9-1e2a7af356e3", "sighting--6207be31-702e-4f00-b2d2-2fb4f95a0c38", "sighting--4e7ceb66-2bfb-4380-afc7-726ab9c93800", "sighting--ae6a31d0-152e-44f2-947c-ec4a8daef450", "sighting--a8c6b01d-2658-4593-95d6-37c6243d0a49", "sighting--7dc8f6c1-17cd-49f4-9223-31ee194d4fb3", "sighting--a404cc4e-72f5-4735-99c7-fb6e61b33982", "sighting--18864792-7645-4cf2-8a6d-29194b15dc90", "sighting--b0386350-195a-456c-9358-b37908d8ebbc", "sighting--f2d920c2-bdce-4220-8f3d-c6871162b216", "sighting--00acf539-8ab5-4b21-95f1-7a3d106fe779", "sighting--176b251d-8706-4142-b9f7-062cd86fb4c9", "sighting--7f7ec975-04c5-4d09-940f-d9d65ad111bc", "sighting--beec4bcd-8db6-4b46-898b-20fc6d90808a", "sighting--f38edcab-f124-4759-84d6-2bc7c7ab4d31", "sighting--49bf2fa0-bcf0-4245-b134-b63d507a4727", "sighting--68e2ac6f-662d-4f12-a228-35990970332e", "sighting--d44753da-7e5f-486c-91dc-334d6e46fcca", "sighting--b7573a5c-3814-4a07-a5e4-84249ae14f49", "sighting--7258e4cc-430c-4b0d-8864-4ef10b860eee", "sighting--8e1737aa-a7ca-404e-87c5-c5778bbdc686", "sighting--3769a665-b2d0-4e81-8152-797885517ee1", "sighting--cc8a53bd-1493-4aae-bf0c-143e15a9809d", "sighting--f97d5446-fc25-4ec6-9655-b249f8f846bd", "sighting--f278869a-271b-4a76-a624-6dd4ae2c11c1", "sighting--771e744d-0231-4260-b381-057d2739d6ab", "sighting--4642b569-4e7f-414b-be25-607fb42405a4", "sighting--e8c62abb-2307-4258-9ed4-3bb151418465", "sighting--f960e3eb-80ba-48cb-90bb-31f090a8d50b", "sighting--f67d7e28-8281-4b5d-9b03-03d2119683c4", "sighting--995f503e-8c74-4c4c-85b0-ad214325b0df", "sighting--a61a957f-54b1-4a11-9fb1-628f926f9f06", "sighting--679ba2f6-b177-410b-ad55-26635d773d53", "sighting--9869c38e-b1ba-4c1d-bf8e-3fb2659ad568", "sighting--0df2080c-0073-4c65-9535-08244d7f03a6", "sighting--a180474e-9916-4081-890d-e1c4f9c3bec9", "sighting--a9ccc8cb-80c1-4c8a-bb10-f5464c1a9f6e", "sighting--96b88c7c-3998-4624-a39b-595be25e7c02", "sighting--34cd831a-7403-483d-8f03-6ce854a7dfe5", "sighting--7825b25c-0590-4564-b34a-20ac2e9013db", "sighting--dede9126-f461-4b3a-aa0d-a09f02cc7929", "sighting--c3cb4569-16ff-42eb-ae82-9483980a9587", "sighting--b2e203ac-34f0-4ebd-b5bc-f3c0ada3fe7e", "sighting--6b728ee8-8eae-4d25-9d8f-58382358bc66", "sighting--572a5a51-bbf2-4d75-bf67-f375d2d32dd2", "sighting--35d9d291-52f3-4b2a-9cc6-e4e4b3f8a7b6", "sighting--a5f91f11-a5c0-4b4e-a598-0553dcc5a70d", "sighting--467f9922-1546-4b61-9330-564d15db4c60", "sighting--09e5a794-d739-4a92-84a0-45ea99c0dffe", "sighting--aa7e372a-132e-44a3-a2d3-53d5a622c9f3", "sighting--9be78d0c-2cd3-428a-b047-e0deecd4512d", "sighting--90773c7f-f6e3-479a-bbc7-945de5d05ca0", "sighting--476b8636-c66d-469a-8896-a32853b4c8a5", "sighting--a913a0d3-244a-41c9-a99d-ee85a3119424", "sighting--e688bedd-88e5-471d-9fc4-160323936c7b", "sighting--fcdd0ebc-8f06-470d-851d-46c262a17d84", "sighting--1a85d6f9-b826-449a-a7ac-602b8161459f", "sighting--fc65dff7-f70a-44f1-9cb5-a5e519a0a1ab", "sighting--c685172a-f2bf-44a9-9c16-9f6c4ca189a0", "sighting--135af720-e28d-4e07-89c8-a37965d1c979", "sighting--7f608d70-c1d0-48a7-a065-cb6f556faf08", "sighting--f3355aea-afb5-49f8-b9b5-2d4c0509a81a", "sighting--d199f78e-5a32-4cbb-b050-a79fcfa5a38e", "sighting--747bc11d-b2dc-4945-b633-bffbdadd7260", "sighting--d7e5b6d3-754e-4261-af58-bea3dec4e46c", "sighting--738dd4db-ddfe-4aae-a58b-aa286f082bcc", "sighting--56a08539-5b57-458f-92cb-2787270b1114", "sighting--a3512e86-854a-4db6-b342-c08c06520080", "sighting--143ee583-e284-45dd-8f05-62c7a78d2dca", "sighting--23b8af0c-507f-4aa9-8913-bbba73176844", "sighting--3546e08d-700e-4bc4-9542-5b8f5f00bd23", "sighting--b3e4cd9f-d47c-44d4-b11a-8d4f51aa2ffb", "sighting--d073742b-cd4a-4b06-8afb-c364ac6c421a", "sighting--517dcf22-43ab-4425-8111-2570f7eb6ede", "sighting--84a27ec8-ca8b-4bb1-88eb-4984fff3e03b", "sighting--e119fbe8-d3b8-4b7b-a73e-67fb7bb765c1", "sighting--4ee9f573-1213-47e9-b203-f471f4ad05ab", "sighting--15f9880c-f68b-4bd0-858b-0f775d56c3a6", "sighting--279f9595-d3c7-49b1-9671-d7dfc37e0623", "sighting--4ace545f-6dea-4e13-8150-5f02a801641c", "sighting--14966125-819a-46be-b496-c6d0800e5319", "sighting--90ee067f-7ff5-41c9-ad3a-3e4329ec051c", "sighting--47a38892-437b-4968-b110-bea5b04df0d8", "sighting--b9c2fa77-0ca0-43f9-8afd-bdc27fd26c45", "sighting--131e832d-4b8a-4211-ac85-e5a4755ed314", "sighting--70a238df-bccb-41e0-82c5-7a9f8f890166", "sighting--8b395d0f-a033-4a70-a4bf-18d18c08ef9f", "sighting--520c800f-1cb6-4294-a839-205fb5b6872a", "sighting--dfa23095-5c45-471e-bdec-9389c7ead498", "sighting--4adb6b85-ed3c-4ad2-9d3a-8c4dca4165f7", "sighting--58e98b7b-0141-4351-ae4c-ef7d9933c2bc", "sighting--25577c61-97fa-42cc-b240-3ecacbaa60e3", "sighting--8c3829a0-8d59-4642-9436-21ee54de902b", "sighting--952d7285-e0ad-454f-80bf-e36efe228fd8", "sighting--62b4abb8-9478-42af-a573-b4632b1a1aee", "sighting--5413f6fb-a9b5-4135-ae70-b1df66c6e122", "sighting--6984406e-976a-46b8-b972-ca3c64af291f", "sighting--1e8432b8-4e24-41f9-af6e-987cf3e839a2", "sighting--ac72c828-58a8-4dfe-abda-e46d67ab0ae0", "sighting--c64cc5ba-71f8-4e2c-a4b7-0825f7cec333", "sighting--70d79900-9b46-4053-86ce-c2441fe67d6e", "sighting--b8c35548-68fa-48b2-b761-8fc9635f999c", "sighting--67548d51-7cc0-4a5e-8200-362e1fd15751", "sighting--6bb9a268-5da4-4557-9c20-63fb5eb39e7b", "sighting--47e6f1cc-a82a-4b7b-a041-aec9afcc3668", "sighting--dc3f256d-b870-4077-b0ee-e6a930125167", "sighting--0d75d144-a456-436e-8143-b776f3e57b88", "sighting--f39978d6-64f8-4f15-8be5-bed01ffdb836", "sighting--424599da-fee2-4428-b9f8-097b896604db", "sighting--0daa13cb-d05c-46f0-bcfa-54f30326f87a", "sighting--734a028b-6640-4784-a6bd-a20ed727163d", "sighting--e9354621-3ca7-43a2-9f78-badd06b4fbc9", "sighting--db453774-7a76-448e-900f-d81c50800601", "sighting--745747a8-231c-431e-8b90-b200e400adad", "sighting--fc0fb0f3-3810-49f1-84d5-5c75fd939473", "sighting--ea33d198-7b97-4960-8f0c-a4a33e342e19", "sighting--e5d9fc4b-a084-400c-9b2e-37345e0d8766", "sighting--812c6449-cc3d-422f-8691-1e5733570ba8", "sighting--11810f73-3911-4079-87f9-a6fc769cfa43", "sighting--c7e9faaa-1cb5-4775-9003-0f9556044393", "sighting--f85d481b-6bfd-463f-a0bc-1a7198b1a0e4", "sighting--c27ddf3f-0789-4bfe-a6a2-f7c947c4fe61", "sighting--e02d910c-3f38-4b83-92e1-7964f5862062", "sighting--59763e68-c12c-46b2-a102-774be4b5aeae", "sighting--c7f8b250-9abd-47f1-b676-711b24f94e96", "sighting--5e9ef4bf-e958-49a9-af78-b0f7dba7608e", "sighting--fd2df038-42ae-4273-9fde-8d511941e32b", "sighting--c80dd898-5f6b-4106-b93b-b5b92fc2f89f", "sighting--4d149cd7-85de-441f-bc5a-b4904d61926c", "sighting--9771c008-fcd2-431b-b1b9-5505e286ba04", "sighting--4e49e415-0cd5-4559-81b3-595cdf89a17d", "sighting--07eaaa23-0ff7-419a-8085-dbf001f716ba", "sighting--da81e1d0-81e3-4bc8-b895-e84af115b28c", "sighting--149973ab-234b-4c75-b034-c02e581a003a", "sighting--070ba3b0-7b6b-43d7-9de5-4a818e8204dc", "sighting--439f64cc-046d-4367-8765-f589a0f0ce41", "sighting--f830567b-c46a-458c-a32a-fb6a05f68476", "sighting--d5155a53-d0e0-4694-9aa4-1cd5c868e0e6", "sighting--594458bb-e429-4657-981c-05aebed985ec", "sighting--fb7aa00e-5f64-45f1-b0e7-048795d4cdee", "sighting--31ec65eb-4c11-4d00-879c-3bec877d11db", "sighting--8f6bf4b1-0a4f-4778-af35-55fcc017d020", "sighting--1871b136-3f31-4d12-a58d-c2cd580422ee", "sighting--9e59680e-a7f8-4e51-8975-c456613d26d5", "sighting--039937de-b6ff-4f7f-b43f-e682d133fe3c", "sighting--86ed6710-a445-428e-827d-8762ba96677f", "sighting--596cc8cf-0df1-4398-aea7-35fc15fd39d8", "sighting--e6643404-6ea8-4e9c-a460-334b18218a8c", "sighting--f28535dc-bc28-4bfb-a177-58de048933d8", "sighting--fb1e24af-ae68-4272-8cbc-fdca1f1cfdd2", "sighting--bc698b4a-aacd-4378-b7e2-f068b8b413a0", "sighting--400fed70-da91-4b89-850a-168975001839", "sighting--3692cfc8-1a53-4679-9f15-b02057e88899", "sighting--058c83de-9c99-411a-bdf0-49509ce0e3ef", "sighting--0bbaa98e-6ba0-4739-817d-f2ab3852a822", "sighting--280c1fa8-52db-41e6-9f49-c54f3de99e43", "sighting--e5f0cc7b-f768-47be-a71a-0842b75b3f2c", "sighting--b9259fd5-1ede-4f1d-9129-a79604b60260", "sighting--3f200e1f-303b-4b9b-a323-9f1f4266bb31", "sighting--05e8260d-e5b8-4ee9-bc4e-6345eca45ab7", "sighting--da0a14b7-9bf1-4b27-84b9-7d74399acbdd", "sighting--fc52c3ce-4965-4e38-a987-dcdec7ed2c14", "sighting--bdee9065-d44f-4e88-ac47-6f407689c350", "sighting--dcc58567-00b2-412a-96e0-6305599f9d18", "sighting--a5e9ee9c-d2ba-4375-bcdb-8b03165f6f17", "sighting--f6e76eb4-4d83-4e74-8f7d-34a37131915d", "sighting--c7e026b3-7af1-4584-b7a7-d988a982ebc9", "sighting--c4670d3c-12d6-4003-98bd-9ac7b6b7c145", "sighting--cdce72ae-be50-4c8b-af12-35480b34fafe", "sighting--e53cfa23-86c1-4989-b048-06f0adc09935", "sighting--1a442d4d-77fb-4074-b4e7-172f3c4db776", "sighting--9b940d78-54ad-4bb7-87e6-a23e1f56122e", "sighting--1379f7a5-2b35-4a68-af8f-1baf97630746", "sighting--ab058419-7f07-4e83-a89c-de8de9fadbc2", "sighting--41001d80-0315-49c4-bac5-6dfbaec40ddc", "sighting--2fb2c9ca-e428-428f-85ed-6af8440bebde", "sighting--0c4dad71-be23-48fe-8b03-4c45b49d98dc", "sighting--b25b8fde-58da-4f0e-9b5e-7dc980a17283", "sighting--08d9ac64-d389-41fc-a9d8-3def1075ec28", "sighting--7a6ada6f-9a86-4383-9e65-22ea799d09fa", "sighting--702a037d-7602-49e1-b2f7-12704ca79602", "sighting--97bc72bc-fd1c-463a-b974-83d00079e7d0", "sighting--b42c58b5-c351-49a3-a43d-5660ad461247", "sighting--cd1ac5fb-f4cd-4dc1-b50f-6a82b8c9a967", "sighting--4df5c0c5-0f5b-474c-af4e-24dc0ee518ce", "sighting--81ce1e10-5cea-4e2c-bc42-11187800f6ac", "sighting--4ede2de5-cacb-4a39-8449-931425c211a1", "sighting--f988e416-1f58-4c85-b461-acfd5cfd6d68", "sighting--a9274431-983f-44c9-b252-98b43805ae53", "sighting--41b7d18f-c557-4b3a-8209-cea4a66b75cc", "sighting--8011cde1-1414-4ee4-bd53-bf8af4147eb8", "sighting--7764ad53-5407-4372-8317-6c97a220290d", "sighting--421494ba-11c4-4d74-bb34-760baa39b4aa", "sighting--3c8fa195-66b1-4bef-8451-5cb2c5e8b3b9", "sighting--f9dd0f18-7002-453f-8b12-8931c5c0df6d", "sighting--22c15fdd-d15d-4342-980f-46ba429ef16c", "sighting--bc9ad754-4319-4c1f-81ea-116e5a97f831", "sighting--e83d75a5-ed00-442a-9398-3901bf1894b0", "sighting--85691483-46d2-451d-bdc2-c4df932c6f4b", "sighting--7e1d7aa6-9730-4dfa-ad3c-afb8d91c14c7", "sighting--e2d7fdfb-d77a-4b63-8432-aa2678e47f1f", "sighting--c6f60f50-8abe-4840-9f21-e834e74e8d77", "sighting--cc7c8008-2536-496b-805d-9eec6d19663b", "sighting--83d54f6b-2003-4b25-939a-a3d2c35cb040", "sighting--60a9cd64-9e59-4ca8-821d-ee276f0b2357", "sighting--b28478a2-e8ff-47e9-a70a-994e2278997c", "sighting--619f0b9a-9073-4382-a1eb-547827f92054", "sighting--30b20b8e-d947-4817-8a7a-5afb7eae2dec", "sighting--66bf024d-56b4-4858-b5c5-cb7efadca232", "sighting--e5d8b219-3940-497c-a7e4-6662c34b8e8e", "sighting--14dc0763-2617-49f7-9b6d-e591b98d55fa", "sighting--ca8f6ecf-77d7-4e8f-ac42-e249fddc2830", "sighting--24f4675f-6e6d-4cd4-a8a0-08b48026ebd5", "sighting--e65e464d-82f5-4cc4-b3cd-b97b5481e62d", "sighting--1391d12e-da60-4ab1-95d5-f76a8262d530", "sighting--6fbda172-beba-4601-a1ba-89eee3b3ba2f", "sighting--20006c3b-8700-451a-bbc7-5a1d9a49cbb5", "sighting--6bdb4f6c-8fe8-46eb-8fb4-ba072222929f", "sighting--85c53815-041b-49f5-9f2b-89a48a78c071", "sighting--9f4608be-7280-4233-8825-2c5db4475746", "sighting--5a580dd1-c21d-4234-a600-83cb176ad8ad", "sighting--8cde232a-d8af-4312-b3ac-1556a8414a12", "sighting--bc180395-8709-416e-8b9d-35e6a92809b0", "sighting--c0ffc232-9954-48e2-96f9-d68f2d99beb6", "sighting--c500af10-581b-4012-a4fb-861232c0bbb3", "sighting--cfbfb480-1b3b-4009-ad76-762fe1f8d423", "sighting--37ba5482-0791-46a0-a601-d5e915ea1f2c", "sighting--3d00a68c-6aac-4d0a-89eb-fe02d0c27afa", "sighting--f6da9de5-1793-4b03-ba57-930054935ad9", "sighting--98759f82-653d-4605-958d-751595de3614", "sighting--c8fe589e-cc3a-431d-ad8a-b1ef88845fce", "sighting--5e6492a0-9db0-40fd-a186-955a6b78286f", "sighting--aa1a4c65-6b6c-48ce-9f1e-1dc86e3f926e", "sighting--5f466046-6a16-4902-ade1-e763f92ad32e", "sighting--f24156b2-918e-4b91-80f1-b0a74f49450f", "sighting--2fb24b1f-aeb1-41e5-b677-b94952fc1c68", "sighting--c6c3fe27-6744-445f-b69d-245ca4d88171", "sighting--bf2897c8-af43-498d-b4cb-005cbe2ea923", "sighting--6deb15cc-a063-46e7-a1ac-437357850a5b", "sighting--2a62a499-b518-4191-b9f0-26b2ef3c9351", "sighting--1ded8e03-6f69-46c7-ae4c-e50015b5d8ad", "sighting--cbd595ca-22e9-4843-a7df-e6e33b23ed19", "sighting--cf05490a-07be-477d-96f5-953776874563", "sighting--3d27aa22-4706-4837-ad07-f3dd7c7dd46d", "sighting--2325a1e4-7fce-42f0-947a-e5c8dfd6554a", "sighting--14ad347c-733e-4a51-896b-fe6767d0165f", "sighting--6ac2d8ff-eba2-44c5-be62-6718fe011159", "sighting--3166c5fb-9ce8-4466-ae5c-643269fd19cb", "sighting--29967bd7-62b2-4467-8a8b-1aee54459e8b", "sighting--49c5a0fa-daf3-4521-8a26-72cdbf5b5181", "sighting--76cb14b1-df56-4458-915d-dfb573eea9c9", "sighting--85b363df-edb1-4786-9221-c35a28af1d9a", "sighting--39aa0533-df11-43df-9fe4-f574c42fc650", "sighting--8e634058-46e4-49de-9979-647582b3db12", "sighting--30fe5e93-0d36-4115-ba9d-33a195dc0161", "sighting--3f5e07b4-f6f2-4628-a6e2-1dabb33c342d", "sighting--14128c99-905d-4043-bac2-741eb391820c", "sighting--35676764-06ab-47ea-8097-92ef92db53ea", "sighting--ccb18562-3cb3-4ae7-9b08-884dde7fad3b", "sighting--66cb3c2b-78f5-4fe7-ad93-42db3357158c", "sighting--4540c2e7-bd6f-4537-8bb7-9fc099fe453d", "sighting--c65f80fb-ea94-4a21-b26c-4d66f1cde245", "sighting--bba9b718-bb69-4315-a5e2-2a39a6f6fe37", "sighting--73c05a20-e76d-4fc1-a34d-e286e0eb4793", "sighting--7ee5743d-4fd2-4f80-a9fa-3f4d205332ba", "sighting--39593e89-5fae-4349-ae81-716eab2fed51", "sighting--1179bbb4-757e-44e8-bac7-61f041e259a5", "sighting--85862f45-dfec-49d7-b5d3-21aa208a3306", "sighting--39ab7b5d-5430-401c-a9b2-7e3771ba8dd5", "sighting--0bf49e90-fbc5-492b-ae5d-0c1f08a0a08b", "sighting--b47a4a78-4b8e-43f7-b2f8-a7f55e80e752", "sighting--0e08230f-507c-4e45-b08d-958d13fb9e99", "sighting--834d3a8d-6469-415d-bd1a-98125a519e72", "sighting--6d7c2438-de9b-4e62-bf84-6478f1255a11", "sighting--c5ea6aa5-3f9f-445f-a0aa-5250ea13a305", "sighting--78acb3ad-70d2-457d-8b6d-98226c6bb489", "sighting--5ebebdfe-ac62-49f7-b751-937e8a41679c", "sighting--5e5e46a0-7acf-49a9-81da-380cf2420746", "sighting--a26a44bc-b071-4879-880b-06c7d917a08a", "sighting--65ececbf-b975-447b-91c4-165909291f96", "sighting--1072ed8a-5ffc-476a-ad6b-45cdc2d47bde", "sighting--bd0afa1e-a474-4991-89b5-bbd966cb687b", "sighting--798bc805-44c4-4cc2-b4bc-e38dfa286aee", "sighting--d89b6d7f-bc07-495e-aaf0-3d5f56280966", "sighting--63cb1b7e-28f4-46a9-bb3c-677935287c8d", "sighting--7fad4231-9769-4676-9175-6917501619f1", "sighting--29102611-854b-40cb-bd74-94afadefef08", "sighting--0ca29531-f965-402a-a608-0ffbd7feac99", "sighting--68a6ad14-50af-4922-8749-f391ab43ee60", "sighting--d958b955-c9c0-4e7f-bdc9-7ea03c6efd98", "sighting--b69700ae-6ddc-4508-8e00-77243b47e05c", "sighting--4b67de76-ed9a-427b-96ff-5649e0f65f5c", "sighting--3c462f37-e766-4fc9-97a9-d62fd2cdf5b1", "sighting--aa4c2202-ada5-4f19-940d-196e69d02084", "sighting--69c7134f-73da-44e7-82f3-59e2c2a77e93", "sighting--273ab582-d19c-485c-8be6-3beb3ca0ef23", "sighting--1ed492f0-7972-48f1-b8bf-fe3502801d0f", "sighting--95b39c37-f634-4894-9965-20c054da44be", "sighting--38c061b4-248d-4c32-a26b-ec3a945b94dd", "sighting--8cad2498-5cc0-4ddb-9878-224df8b1f144", "sighting--c52cd328-21be-4bf7-a823-08a59dd12c37", "sighting--79607eac-52f7-45f5-b0d7-242183b969e4", "sighting--2923b0b0-9a56-48fc-afc0-bc709d1fd0fd", "sighting--39337d90-5c91-4a4e-bd89-0d9931db2f73", "sighting--fe98264d-2c78-4690-811b-c4f3e8dbaf25", "sighting--30c86491-2524-4e2d-8649-1ea045f6893f", "sighting--e2ca695e-cc1f-4d1b-8c81-ffce3c24130e", "sighting--4945d2a5-9612-40b0-a694-4de86dc6f47e", "sighting--21d2b0d6-a8bc-457f-92e1-766ab735ac31", "sighting--9c1f2e8f-de90-435e-bde2-dc237c4ceccf", "sighting--06b96637-a740-4052-af1a-8e1629863a74", "sighting--d72be2bc-f018-400a-b052-3e63feaddd67", "sighting--f8dd7fa8-d07a-4a81-a8f3-1cbacf9647c8", "sighting--bf3a467c-c084-4faa-8df2-adf277c59f8d", "sighting--0957eb5d-d733-4803-aa4a-1283e2505227", "sighting--1bddf6d9-cf16-4396-a06d-9da987c21902", "sighting--1eb45215-9987-4f81-83c0-d3e6a42d26a3", "sighting--3dec58e8-dc32-4866-b978-b291c28e8dda", "sighting--db35f593-b799-46b9-8db9-ee5838e87d22", "sighting--1b3023b2-da4b-46ea-830c-966750cfb8b6", "sighting--f2cec454-765f-4ea4-93e0-e13a005db6d7", "sighting--56648551-e580-4347-b8d6-7e55a84ca472", "sighting--e3d27ec2-78a8-4335-b0a5-63cd02ccbc47", "sighting--6401a4f2-4446-4614-8733-fcd6ac35bdcf", "sighting--218712d3-007b-44c6-a4cb-09b646d411c6", "sighting--8e4846df-3da6-4583-a2e0-130f2ec1a776", "sighting--836e04ec-26ca-4be4-8928-0888a5bc8126", "sighting--17f54177-418e-4659-8cab-2974c7b941f1", "sighting--6b07d22b-bac7-4902-8c23-6e1cd36c2794", "sighting--f8724ac0-0728-4071-a16d-53aa3bb87d78", "sighting--39145193-7c19-4977-b959-cbd4a429d10f", "sighting--0168f373-2d18-4325-af52-6fc2a0ac5bae", "sighting--663dcb89-9099-4662-b0e4-11434d853d2c", "sighting--10b8bb0c-331a-486a-9930-8b1ff7994f1a", "sighting--8dbf8cac-2030-471d-b662-1c9aa5ae60d3", "sighting--cff9ce74-46a3-48f9-a4be-40f962ef0f06", "sighting--1aa0611c-f792-45a2-b8fb-33be468aaf14", "sighting--87771124-ba21-48ea-adf8-b49c1bed3b7a", "sighting--1d8ff95d-ce0c-488c-b492-87ec0d7af8f0", "sighting--16524f36-9804-4024-9b0f-4d4e51e6cf29", "sighting--e9e56c95-ad4f-439b-8ba0-66d6b6805b0b", "sighting--cd167ae5-ddc7-41c8-a98b-0de1763cda38", "sighting--c6793d09-bd82-4eb0-ae03-c8e2caa90cf5", "sighting--0473d43a-61ed-4e94-a2a5-7034dc08cae1", "sighting--828c9ebf-6ff0-4e85-9f5c-af227174199e", "sighting--cc0812e6-a3d7-447b-aa76-926b65ec8201", "sighting--618fb3a8-d1cc-4569-8654-20908e6cb568", "sighting--fe49eabd-5195-4c92-8ea3-1c6ee4f7314e", "sighting--8df5579c-ff2e-48d0-810d-ce84a87cbbaa", "sighting--e4cc9d0d-9d76-4a22-8fad-8403ce7f6d67", "sighting--e8072f33-3b26-4ef8-bf67-ff8b56c6d861", "sighting--0beeef24-0647-4001-bd8b-872bfaab3636", "sighting--e635f4c6-0cbf-4f3b-99af-509c654838cc", "sighting--ca140075-b1fe-4619-a021-8c38f1a805b7", "sighting--5ee94bf4-8c05-40fd-9507-62329031a602", "sighting--21c75e5d-0b16-4d48-be32-e27dc9bf7c5a", "sighting--89e10020-9297-49b3-983e-43a1ad60ebd0", "sighting--a941429f-69b3-4374-a707-5ceb059a6283", "sighting--12caf9f2-3015-42a2-aa29-99dad5fc571d", "sighting--56c3e414-30c4-489d-8b67-ee568a44bf11", "sighting--df8d1e35-b144-46a3-b6d6-28459c583207", "sighting--5796a47f-cf4a-4663-a43b-0c0049c2a86e", "sighting--e3bab4a4-696f-433c-9ebf-99e0f77965f7", "sighting--b7933792-0013-4051-ad27-2ab84a36cb2b", "sighting--defb7b63-8817-47d7-b66b-eb084ee91712", "sighting--0e37a967-6b83-4b1c-abee-4d8580858c85", "sighting--338634f3-f17b-421f-bb8a-07cb123fd548", "sighting--e3a876f0-77b0-431b-b615-b3e507eb934c", "sighting--1d210feb-cae3-4109-b9fd-0029a6116dea", "sighting--0fb25fb6-24b9-4e4b-ae37-4e1b717d0fd0", "sighting--8a205f08-e69d-4df1-a47b-a152147c5e3c", "sighting--6dccf010-21b8-49f8-a04f-025e590c3528", "sighting--5b2964ef-0269-4fc9-af67-2bda0bbead56", "sighting--6013abda-0473-4b71-a9ca-4a0baf3870fc", "sighting--9baa8d7d-f591-4a6b-876e-f66f00930781", "sighting--c9a82adc-f333-4e58-a4e7-9844bf41a844", "sighting--1614614e-ef8a-4b18-90eb-c0f349313e0b", "sighting--f81ad613-cdb1-4534-9744-e80c583afb13", "sighting--6a6227f1-5e29-403e-8d61-a7c09a01c238", "sighting--d54ce917-00a6-4ecf-ae17-404029262a74", "sighting--9cd3bec6-a7eb-4c6d-b1d6-7daef49bfa8d", "sighting--800b7c39-4e1c-43b3-8069-69d2b904d8b0", "sighting--a90750c6-36d1-4636-85dd-31a78e8134b4", "sighting--73b0270c-814f-4f83-b091-8c8ef8be415d", "sighting--7837c9ab-33bb-45ec-ae95-656344097d15", "sighting--0990741e-8342-4694-a8d7-9c0b4632f791", "sighting--1d3fa3f7-cc5b-4dfd-ad3e-d248643aeb6f", "sighting--a390c997-0cf4-4df5-8009-c28594e4ecd5", "sighting--97ef24f2-b5a7-4d03-85a8-54d1d54f52cf", "sighting--2e6440df-6262-4c20-ac3c-ff3295dcd8eb", "sighting--26811b86-0bc1-486d-8727-53410cf1c804", "sighting--0d68d969-1a2b-4479-bc65-735a34989343", "sighting--62e3859a-85c4-447a-98c3-015ea09b16bd", "sighting--d05e90cf-9754-4e09-9b3f-9731623da131", "sighting--bbd6a4a1-6dd7-41bb-816f-e5f4e384634a", "sighting--32ff8296-da72-4297-955f-96233e6e81ed", "sighting--f472a409-8ad4-4dc7-9327-e215201ff00b", "sighting--d55d941f-67ed-4f78-addd-e2a7527bcc6d", "sighting--e7733995-8f7c-41eb-ad97-1ced5eff2b16", "sighting--cd8966d1-fd34-4de4-aaa6-0c24623b3987", "sighting--cd61f666-82ac-4f04-adff-e97c79d6a7de", "sighting--6364ec93-67e9-4152-addb-42af67981977", "sighting--87676d34-ba6d-4629-b419-bf9512feffdb", "sighting--dc46af5f-65ae-4ab3-832c-59eb5fba181f", "sighting--81603cf3-bb1b-4b3d-bf8b-164b802d305b", "sighting--5b28e705-3918-4dde-a890-4f84aa55c905", "sighting--6792bdcb-12c0-4787-874f-d8ca599b8abe", "sighting--203d9216-ae14-4065-ac0e-c755382331be", "sighting--2865e1f6-e562-4549-8da4-aacdd9cd17a8", "sighting--a9425e08-386a-43a1-b10c-7c95bdafa78b", "sighting--b49616d5-e2c5-456a-a4fe-8147da401ca8", "sighting--6582f261-0f23-4c57-a91a-67b70c55f0e5", "sighting--6755cabb-efca-4492-99d1-5b1cae5e18de", "sighting--c7a1f5bc-7636-450d-a0ea-6bb4f9130054", "sighting--f9023185-4cf8-4164-9e20-33c83c7f08ad", "sighting--f5c2a0f1-6d01-4c7e-b3f0-4c53865129f2", "sighting--c7d91f81-de7e-473f-bc4b-e11d9aa955ab", "sighting--f31b06c5-72f3-46f8-9d8e-2ec8374c5467", "sighting--1ea85c4b-bc32-462f-adc1-ffc501adaa84", "sighting--8c9978d9-d04d-4b96-b757-70c0c17a079e", "sighting--f220a3f1-677d-4124-8a16-74bb73a7342a", "sighting--6c4fd0b4-9ded-4e2e-8801-402256554db7", "sighting--8145b4ec-ba11-4b9a-b3ae-64b833808e0d", "sighting--4bf92c1a-e81e-48dd-9f48-25d666782c1e", "sighting--197b9916-d32d-4552-8024-886b84a8c1a2", "sighting--1883c213-fb38-4776-bf53-185126cb75cb", "sighting--2608bee2-4949-4c02-b991-57cc3952c2b1", "sighting--ddfaa863-5595-4d7e-9e4b-ddd0ea980d63", "sighting--94733680-9d8e-4e06-9772-4b56afbc29ba", "sighting--bb603f3a-7d3a-4ad7-aed5-6127cb7e978c", "sighting--6d32cf57-e788-4c57-99a4-3ea18b422b96", "sighting--f2b400cb-013e-4de0-941d-14d331244fbc", "sighting--da0ee828-aca4-4f19-8d95-0df47a8d572b", "sighting--df708b76-b546-4496-881e-f6eba84906cb", "sighting--9fadddf0-bc2f-45c9-b575-e70dc2fe0649", "sighting--24d382ca-cd60-4f7f-aa63-674ca51926c3", "sighting--0caec486-2315-4f48-9e6e-b0d4ac379b25", "sighting--a4371b2b-e0f3-4281-97f5-5e64f24d9453", "sighting--ffa3d605-8b1e-4053-8967-4b490d125ed8", "sighting--e6d102f8-0321-4f2c-8797-5de4cda2ad89", "sighting--0753c20d-c0f4-45f2-9296-ca9b5333c228", "sighting--2426dc6e-4751-4d41-89db-b51dcfb8fb13", "sighting--6ed25906-e9ca-47be-97c7-bff96a9f2326", "sighting--bcdb09d1-96b8-4c19-9b95-166af192d49f", "sighting--bfc3f79e-0779-41df-a905-c81c8bb04151", "sighting--9e781318-03b3-4970-b529-0ae413432289", "sighting--c45bd4f5-2924-4a0e-8570-0d128844688f", "sighting--d4e18ca7-c525-49d3-b2fb-d6782f97da3c", "sighting--2ddc87ea-0f4b-4b6a-b790-99821ca312a7", "sighting--3dc5560f-476d-4ec6-bb7b-afbb98ceb646", "sighting--d456d287-3a70-4335-8244-f7198231a51a", "sighting--611b5b18-5de9-4fc7-b6bd-3961bbd375eb", "sighting--f9fc36dd-e51e-433a-8425-cbd2d4a67b85", "sighting--514b7a32-df12-4694-894f-6859803e34d7", "sighting--9954e7b3-b3a0-4ae3-b7ba-2760d471ea6d", "sighting--03a8c6fe-e8e9-4856-a9c1-aeda3e07b499", "sighting--bdb998a2-5006-4ad0-b168-6a7e3d42871d", "sighting--af3dafd6-725e-495e-b105-89ac79c795d3", "sighting--a4c2c566-b3fd-41d6-99bd-88f1b3c682bf", "sighting--e8d70a73-a71f-4e6f-ad17-84046d0d0dae", "sighting--c0993c6b-3ac3-4928-b91f-62dce1f0c664", "sighting--d4a3a366-dd35-4bef-86d4-c47b23515dfa", "sighting--4f48ae3f-86f9-42d5-8baf-4617a7d241d3", "sighting--65404e47-b235-4980-8495-074ae4c9fad8", "sighting--2a034b9f-28dc-437b-b1ab-3c15e8d99a1c", "sighting--0011ad49-efbd-4e00-8277-a512c207cabe", "sighting--de428a70-7317-4dd5-a278-572fee6fc4ba", "sighting--d433ba67-e222-4b50-9ccc-0bf1441ecc3c", "sighting--e141e57b-4864-487f-be9e-962917bf26c2", "sighting--9417b0e0-a6ff-41d0-b924-29f47875a8a9", "sighting--ce9e614d-824d-42af-8494-d11990c03df5", "sighting--9a545a6f-e436-4cbf-996c-5253e780e16a", "sighting--f3bd184c-8a69-41fe-9218-80b15a4563d3", "sighting--a6940bcd-dbc3-4595-a68c-81b7a4046c9f", "sighting--534a3ad9-90ba-4136-8068-d2c392499eb1", "sighting--8f44d8e4-64df-48fc-87d4-307341f3455f", "sighting--4d20395a-1521-4ad4-8671-5a255c5e2af6", "sighting--73016a4f-11f8-42d5-9658-fde43ad4662e", "sighting--489bf6aa-a554-469e-9ee0-400564ea5a8d", "sighting--e65c5f1e-f066-4173-86f8-858ec56720e0", "sighting--a921adf0-3ae4-4ac1-8cfc-3c5d66b280e9", "sighting--e7f46944-836e-4a1a-a60a-0a561fbdf33e", "sighting--ecf484b3-4f34-4033-9379-249053ec60a2", "sighting--13b6d978-b9f4-4c04-9d73-dc476a9b9a2d", "sighting--ac6abf2f-d024-4332-af19-14f19979d0f5", "sighting--cfa9feed-4afa-4a2e-a4fd-191ae97b49ad", "sighting--95b96f76-6d1e-4551-997b-da779060e5d0", "sighting--b1a91122-1af8-4da5-b8c5-64de68601160", "sighting--e09cdac1-186f-4674-96ba-112933b41acf", "sighting--98e00e99-642d-4605-a78e-c780dba5bcca", "sighting--0eed88d6-0a0a-473e-a7d2-3a067737bf47", "sighting--87c36ff7-9752-4418-a39a-5a8969b2df7d", "sighting--8f986a2b-4c61-4f44-8f78-ef0aca874f14", "sighting--7f8e07ca-0c0f-4f1b-aa62-13ffc03732da", "sighting--da27efb2-f16a-4f4f-a5d5-0b5a0d9dd621", "sighting--d205f383-ab86-4071-add7-5829f6586893", "sighting--979310a8-6d37-484b-8470-1bf42eb22383", "sighting--99e29e12-5974-4add-87fa-0913976f6305", "sighting--c6673180-7db1-46f1-b587-fa5f03761ede", "sighting--0177d209-3623-4a5a-8d1b-1498901620f7", "sighting--a572a0ca-c42b-44c6-8f25-156fa24a0d39", "sighting--060761ad-867d-4d2e-a3ed-2e85065a6e04", "sighting--e78df76d-68c3-481c-a58a-472cdf7176f1", "sighting--61ec995d-e44b-4a45-a72e-d681f4cd1324", "sighting--def34cc9-87cc-4391-9300-45e69c308864", "sighting--558cd754-db39-46a9-8d25-731235ae2902", "sighting--e321701c-8b4b-44c2-9c0e-042db2bba640", "sighting--5d9c66f5-563b-44ba-a332-7ef7ef773d1e", "sighting--e63f5765-f5f3-412f-9ae8-9c747a03124a", "sighting--613c2067-9be5-481a-b460-7385b6df6c37", "sighting--3c7ab1fd-5f1d-4a9e-b681-2e3ce915726d", "sighting--0e43cabc-ceed-4d79-94a8-6e25afdff604", "sighting--9b05f548-b370-4e46-913f-f5cbc99fae02", "sighting--25d677e3-6fbd-4a58-8be3-54cc7ab88470", "sighting--6aeecfc9-3ff7-45be-a423-6a466f50c6ed", "sighting--922edb43-fde2-4b73-bf38-8472ed21ce51", "sighting--1fdcfe3b-54d5-4297-adea-a20abae47989", "sighting--795ab436-f29c-493a-8cf0-d4da590b1dae", "sighting--6ded8d67-b3b9-4409-b96f-619b58929f84", "sighting--f8931839-edc5-4049-a71e-1841e886eff9", "sighting--a3581309-8398-4cf3-8db5-569cb8e8f7b7", "sighting--785f5546-9509-4788-87b9-59e378d6a55d", "sighting--e868cec4-7d94-4ea3-850e-4f50216187dc", "sighting--d8811f41-83ea-45c7-84fa-dd8555faf263", "sighting--fff33899-7dea-44d5-889a-ea8f10444f9c", "sighting--81a6ea14-7e6e-4e4d-9653-ebed8f7d7560", "sighting--f03ea5ea-4b11-40d1-90bb-013f0ddfb8c9", "sighting--6f2b94bc-eea0-4807-b85f-4902e6a865dc", "sighting--9a58c94b-2765-491e-a239-44e3f3c65229", "sighting--dad7c661-bedc-45b3-b2c6-81355bc5be02", "sighting--80e80ce2-603d-4a59-b97f-b963f1295fa1", "sighting--fcb97fd9-6432-4687-bca9-67e287799f8e", "sighting--f712f2b6-f920-4def-9264-1710aecc8e02", "sighting--69f8a6cd-0113-45e5-9d72-f1b89e460c8b", "sighting--eac9db71-e048-423c-a28e-a939575b15d0", "sighting--e1a126fa-6ab6-4160-990c-349938dd69ce", "sighting--02813f05-a32e-46d0-991d-5087770b9400", "sighting--bba5a15e-f53f-4644-964d-f458118c82de", "sighting--2b754c7a-8033-4163-8ec2-2e8f2c95bb5b", "sighting--09e0c0c4-7652-460e-b8e3-f9fc1ca829e3", "sighting--044b77d2-fccf-475b-86d8-fa4b478ee30b", "sighting--e1cd2e8f-2c40-4e8c-9e35-4783ce5986e9", "sighting--cb09815b-aca4-48e9-b2c4-f8122c5e8760", "sighting--c6732b9d-8262-4e4d-82e3-9f60a59190a0", "sighting--c4a70ffd-183b-466f-b06f-58ccffaef2b4", "sighting--c990e5e6-376a-45f4-aaff-1ff3f389cb17", "sighting--cba1f34c-1073-4669-b0b3-41b8f8cc2769", "sighting--cfdbffd7-e0cc-4f47-a21c-3241e60a6585", "sighting--ac6535d2-cab1-4c6e-9846-15f70876dd22", "sighting--02c1176b-4b7b-4d20-8559-4455c56ca91a", "sighting--250cc285-6b03-49fa-8506-1afbee0ced23", "sighting--46b4774d-19e3-468d-a790-5b8d67c98cc1", "sighting--8787832d-6a54-445f-bbbd-930e9dc51be9", "sighting--00dc87dd-df96-487c-89a0-8fd7a5d83694", "sighting--1cef5502-6ac7-42c2-bf2c-9719c8a1e355", "sighting--63eeac41-a16c-4f3b-81e1-439a1f67c385", "sighting--fb11166c-f231-4456-9d01-a41056c58944", "sighting--b07c99bc-0784-425b-8f37-1e2731838f17", "sighting--c6d8919c-f875-4f60-ae8a-4fe7fbd9213e", "sighting--1e7168d2-8730-41f9-905b-24bd8ddcc998", "sighting--e66e5388-6cb9-469a-a4ea-168a1c21907e", "sighting--67eab644-07d6-449a-a7b8-1b1762d0dbbc", "sighting--f8de151c-7ab9-4d3f-b1b2-44d01e86b47b", "sighting--c70209f3-cceb-4542-8d11-7ca3dfa5e806", "sighting--8d42504f-0498-4724-b828-10aa22e9222a", "sighting--5973b918-fc56-465f-b69b-a3d75a9481ab", "sighting--1d04c282-3efa-4a96-9f15-d959ba318007", "sighting--51343835-b005-4c66-96dc-9b8ce31436f1", "sighting--d98978c0-550c-4757-9d92-80b3ecdded6d", "sighting--9b090129-cc23-4379-b019-8c94c109d094", "sighting--6d58498f-ae3f-4807-a259-54f7f80fed86", "sighting--85d4b12f-1821-4b06-b385-615bfbb3ef2d", "sighting--5f695e0b-c039-4ac8-b2ce-c7a4b06bfad6", "sighting--c0e12d46-452b-4f6d-9812-4952a06f7765", "sighting--259fd66c-507e-44d2-af4f-e318db3e77bc", "sighting--993ff6d7-00c1-46e5-a17c-dd06ccf01185", "sighting--a1386f80-ccb4-46ba-8605-3e850cf6fbd1", "sighting--78351ecd-0273-4f21-ab58-de738057a8e6", "sighting--eb5cc931-7e29-4c40-b3ef-a85c95a75ab6", "sighting--bd614416-a833-4e57-8b00-bd78b7fd9e7e", "sighting--bf43329f-49a7-4279-bbee-f2fee8c25fa6", "sighting--603fde23-540f-4d15-9e40-e31eb49f71a7", "sighting--ea8d9bde-d0a2-4fdc-afab-9e4b09d33d10", "sighting--6ec06216-2de5-44b2-bfdd-dae7ca0a64fd", "sighting--f7d24662-e7ab-4242-a70f-79419c3dd0ba", "sighting--4e823b8a-3f66-4f34-baff-aeb4e4435e78", "sighting--f94ab088-b393-445a-9fab-bde1b8969a82", "sighting--6467d7d2-53ba-436c-a222-b35a15a971ef", "sighting--7610de3b-bd2d-4777-bcd9-a3cae78d68f5", "sighting--f5593d59-43e5-4d6f-86b5-20e8b087ce80", "sighting--bb043b53-b797-4b2c-b828-799bf546a882", "sighting--8d28d4ee-85c3-411c-989d-29c195d53f7b", "sighting--a7fe97b9-0921-4fb8-af3e-7e9ed960168c", "sighting--c7f682de-da04-4b0a-823d-f0d2dd634f47", "sighting--a0b061bc-24c2-4715-af7a-d036084ddac3", "sighting--eb7a17fd-f773-4b59-81f0-aee030a29bca", "sighting--69ff6ef0-f9b6-4840-b051-039d733ac1c6", "sighting--71ecd953-c449-4457-a4ff-b73c174d5efb", "sighting--713c9db8-77a5-4b56-aff4-3063be4f3ac1", "sighting--d62001df-a9a6-4297-9e9a-df4b42cecd00", "sighting--4bb49edf-05b9-4056-8049-f857fa560de4", "sighting--b22b91dd-fa6a-4b3c-8206-388285842f43", "sighting--7a1bfc76-e968-4612-8cb0-9ea43bc95ca2", "sighting--4e2009e4-d1e7-4e28-aa69-5da43ce22fe7", "sighting--932c7d51-9365-4092-b12a-9b2084f5bbf0", "sighting--189e8f7b-cd39-4f79-a8e1-7d2979202070", "sighting--de3e6440-a457-4e70-8e72-88f1a2234a2a", "sighting--0332b35a-69ba-4f43-ac63-69e946574b1e", "sighting--d4e89a8b-cbd6-4efa-9797-2572abdc8432", "sighting--595a64d3-0c7c-44d0-9569-b668eb218ce7", "sighting--c6bab343-31e8-4fae-af8a-778460f109a0", "sighting--5da20e8d-29f2-46f9-86a9-c996b50e5eb0", "sighting--42fa6c5f-42a7-40a1-acd7-b0b31d0b60f8", "sighting--c2abc2d1-2245-4971-a948-70d43506a73d", "sighting--2906e898-048b-428f-a62f-f77f0a6e622b", "sighting--a2defaab-0498-4d80-ad63-9e18501ecbd8", "sighting--15211793-44df-43bb-9449-7170758cb489", "sighting--ac9184d3-49fc-4634-8e06-d5e0d60bdd5b", "sighting--81f4d453-8328-4add-9877-67c3783d4e8a", "sighting--736f3b6c-074e-4556-9d33-58e69e15a33e", "sighting--82799ac2-0676-4a01-a975-65e63d129898", "sighting--e5a116df-dd89-499e-8967-45f95a39edcf", "sighting--c1a470b9-2d41-4772-b4e6-6f9d0d364d94", "sighting--0d3d06e4-b62f-41ff-a2a3-048bf76b2eb3", "sighting--3c986c74-9abc-413c-81b8-8512430904a7", "sighting--f4b90e13-b801-4be1-884e-78b296b786b4", "sighting--53c36202-3f21-4c0d-b6d3-0216ddec7da3", "sighting--7fdd15cc-e60c-41b7-b9e3-bab0d292be55", "sighting--8fbc1f13-f02b-4d6c-b13a-99673338ffc5", "sighting--f2a57db8-3204-4fb0-818a-a833767f4018", "sighting--3354b77c-458d-4adf-a8e4-b8225991e9c6", "sighting--941170a4-7a5c-4e74-9f83-a7502c9305c9", "sighting--018392cc-63c1-4e7e-b6fc-156fe0d63060", "sighting--8f44c695-7a06-42bf-b3fb-d794c8477c9b", "sighting--3677aba1-09c9-4a21-89c9-8b22d3b61a7a", "sighting--5a6242e6-65b3-4bbc-b32a-29a86e7e445e", "sighting--8ffd6765-b4c6-41f3-a85b-900d358dcc9c", "sighting--0c3cb12e-2772-4e09-b795-799c380a287f", "sighting--60e50d17-1938-4609-8e31-50a1e9435936", "sighting--3c042b62-a1b0-4caf-ac0b-8c126616ffaa", "sighting--8cd998dc-663c-44fa-9e4c-23f511a1713a", "sighting--5fcc26c2-cf8c-46a0-8398-7ff2f5d7cc37", "sighting--6c1072b9-34c0-4d77-a073-617be1f0ade5", "sighting--4ed24d31-7ea7-493f-a06b-43a5766b95ab", "sighting--9773d9b1-128c-4214-ae80-d2cf9290ac94", "sighting--c3537341-0808-4b6c-aa3b-d70875eadea0", "sighting--b85deefa-ff48-46e7-8788-05c84f2ce330", "sighting--59640084-c8c0-4ca4-94f8-1f06b477f9d4", "sighting--6bd920f2-3ccf-46bd-8b14-d61daf010cd0", "sighting--7ed08b75-c89b-4cfd-a7f2-8e61681535a0", "sighting--b1946fc9-69e1-4478-b6e3-14d09fae5a9b", "sighting--dc55ed95-fdd1-4f46-a5c3-8efbd143bf38", "sighting--9be98332-d199-4b14-b00b-d9d14dcf6829", "sighting--7e5ef34c-5cb5-4eab-9baf-8835170adf9a", "sighting--1ce6e836-dad3-48dc-b7b3-f1c62ebadb24", "sighting--3911494e-5805-4c8d-b3ab-77edc8352d96", "sighting--f21c1103-ab12-4efb-bebb-ac547d7ec77b", "sighting--5c6c0de7-dc92-4b2a-ab8f-b7ce6f4a525b", "sighting--fde0d4b8-ddc4-42bb-a1fe-fa74f255dd7c", "sighting--160c592c-c407-48b7-9a58-fa07281eb5e4", "sighting--411aa9b4-ffad-49e4-a24d-1909e9939fbf", "sighting--2ca924a7-2b9e-49c9-8862-362b0f791454", "sighting--528be83d-1a6f-413e-b1b5-1243b9783228", "sighting--8367158d-a68b-4a93-8939-ebcb2c99fc76", "sighting--4912dfd3-d3dd-4522-a1d2-9db59f7b9f14", "sighting--8792fe4f-9c57-4683-8bfe-482d58e8826b", "sighting--15697f33-7b4f-4034-b653-3236162ef6f4", "sighting--aeb6429e-8802-4a3a-bcde-ae2ee5952bac", "sighting--d44c041f-66db-4ec9-8f1e-b588e243aea4", "sighting--41300c7c-8d19-4c27-bc75-3f3e331a0861", "sighting--639164fc-6678-476c-813c-b475bef35f69", "sighting--c59017ef-d329-4d0b-b738-e83a7cbd0c93", "sighting--5da9f16b-bf40-490b-9c5c-23121b557c36", "sighting--f6753ce6-918f-474d-b599-ef158081e1a0", "sighting--6b15e024-41d7-491f-8593-33035479185a", "sighting--edba521c-faf8-44ff-a922-b8627925d49e", "sighting--9611e13e-b4d9-412c-a608-d3943f723f26", "sighting--a393e3c0-9931-4ed7-9e08-2a56888b7f39", "sighting--5b41a70b-b52d-42a6-bc68-3051997493da", "sighting--ddec5695-9a6c-4cc3-b2e5-893a577af4aa", "sighting--7a8ad05d-9e1a-47eb-8821-d010ce51a089", "sighting--a2d7f523-6509-4b6e-ab52-0578f0c72f94", "sighting--d4f3cfa6-52a8-4d10-9418-d03e8cd53437", "sighting--d6f69c06-5af0-42c7-8d5d-3135355f700b", "sighting--39c07759-7e61-41cc-af44-2e741fd03860", "sighting--e24b3164-2c9d-41d0-bc18-cf8b8326ad95", "sighting--23037236-54a2-48a2-af32-0e3a1af8a1b9", "sighting--193bbcab-00a9-4f56-906d-7a421818bd86", "sighting--3bcd8284-a874-407e-a0b1-4c92085ba174", "sighting--88f735ef-2073-4e07-aaf9-ff6cd1fece64", "sighting--3026f2e9-9f45-4417-8369-9ec08afb1e0a", "sighting--a2515049-7048-48ad-a184-d1ff8fd321ab", "sighting--445db592-ecef-4935-9d33-63fba05a9631", "sighting--df036806-c2d8-4a36-a415-b8e660f10ef1", "sighting--a9671ce1-71cf-437c-bc63-df31f0e2aba4", "sighting--f91d6c14-5798-4426-ba60-5b64b02f9707", "sighting--de6a9312-ec9c-49f7-b5d4-53949bcf88e8", "sighting--6fadadf9-5610-4e26-aa7a-9c6f28eea930", "sighting--a24022bc-22a8-49a2-ab36-92637ad8fff1", "sighting--201c750d-fe63-47f2-ae26-98685a43cafb", "sighting--5f630b03-3c18-433d-8039-e4e3038c11cd", "sighting--ab2cddae-f7c0-4f7a-acc1-12ace24ef42d", "sighting--7b276f3d-b92f-45fc-b7d4-55f040e3e1d5", "sighting--175cff78-ba89-42d2-9d81-9dd3e0854247", "sighting--0aa49853-e5af-453c-ab8b-e634f7d2afee", "sighting--38dad66a-70b8-4d0d-b404-9889dd2b59a3", "sighting--b1b2a784-2fc8-4310-81e6-e8a4d9076ff1", "sighting--6982d0c6-3033-4f22-9977-3cf61e0aa3cc", "sighting--c7178eca-77c5-4e51-a1c2-82497f0bea32", "sighting--a2de8e5d-9eba-44e3-8463-1b0f473a6466", "sighting--bbf42896-df95-419f-88f5-5c4a20974d7d", "sighting--cc001962-8654-4e15-8d2c-329bb8b5f782", "sighting--12c87900-3d97-40dd-85da-471e9fcdf37a", "sighting--0643e25c-a631-4c24-b6fc-eec8610c5401", "sighting--7da1722f-6293-4aaa-9f76-670de009cbe0", "sighting--e7c1b0d7-6fa2-4b81-819f-0062f4c0b880", "sighting--d57b3278-4369-429d-b8c0-50a0aa54381a", "sighting--0c972f66-57d4-47e1-831d-86c1a06fc02d", "sighting--8981e9e9-678a-40b6-aca9-d9602690346d", "sighting--4dce39b2-c8af-4c3b-938e-ae78ac8293eb", "sighting--68df9a93-97f3-4e26-99a0-c666ad5cf1e0", "sighting--0083d139-5dc6-4251-94d4-f4e0dee50c12", "sighting--22941b36-c520-4b15-ba35-89969f31ef2a", "sighting--7aaff4f7-50e1-4685-b8b6-c6fd3db69447", "sighting--f2c5897b-4b0f-4647-ae13-b670ec6cd138", "sighting--c325bb59-4801-4739-a20b-2aab3c19d856", "sighting--aa6d94b1-52f8-4514-90af-0e876e01d2e6", "sighting--7afa236e-2f43-4dec-bfcf-c616735e7e31", "sighting--ec045ab1-544e-428b-b53d-0b45de5e5160", "sighting--1b39a668-207d-4f25-85ff-36321452b1a7", "sighting--294e2ef8-2e04-4ef2-9fe5-e871f9cb2b60", "sighting--744cf995-a427-4cc5-86cb-ed3727c496e3", "sighting--56f575d9-de90-4806-8c6d-c7456b3423c6", "sighting--a4b23e29-e9ff-4396-9bbc-0daa007c2054", "sighting--00fcceab-5c85-4d1c-83f8-72bed7ee891c", "sighting--fc5509b8-bac5-429e-bde6-da92df8bfff8", "sighting--7ed979aa-353f-42f4-a3a0-a2fb07242a4e", "sighting--d1cc762b-c4b7-4c35-9a48-553b206e13a2", "sighting--f3a43752-3cbe-460f-b375-b65dbcdf11f9", "sighting--890fbc15-4b24-499e-af5f-03d18f9868e2", "sighting--50c1c44c-b899-4d52-b0eb-67d3e24bc2d7", "sighting--84661d6d-6405-48c2-b44d-efdf3403afd8", "sighting--303bb67e-6604-4866-9072-e54ead4a5152", "sighting--ccbf13d7-b4ba-411c-be56-baa4004e151b", "sighting--a3f5b4d4-32c3-4aef-b035-59a34eebe685", "sighting--d28c949f-ec10-4560-98ce-c4630c582079", "sighting--4bbe5493-0e26-4a89-8735-0feb488e7f2a", "sighting--800aa3b0-3466-4dba-84d1-9a9c1e9f86cf", "sighting--44dd872a-53a2-44c7-9338-a70af099ed65", "sighting--25019bf9-87e0-4676-838f-690551718c71", "sighting--801a1a32-fad7-4b98-a5af-2411cb11accf", "sighting--8994abb6-9471-4e60-aeee-ec3c04cfaeb0", "sighting--52ac41e9-505d-4823-8373-9d77c26f23ce", "sighting--4ded758d-74fc-4b44-bcd7-10ef7949c4f3", "sighting--57405a4d-2ec5-4123-ba7a-4f0296315ee8", "sighting--40429de1-3366-4f2f-b87e-6be5d297d499", "sighting--dc2ede79-18e8-404b-95fd-a0369cff718e", "sighting--18ed763c-dd07-4985-b17f-19bc7d4c37df", "sighting--bc5a468b-9c9d-42e5-80bb-78ca8706add4", "sighting--02d10efb-e5e5-4067-bcf5-3761f250b357", "sighting--b705d70c-8ae8-4d56-9389-0907718944fa", "sighting--211f1744-d6da-40c4-9b4e-ea057e21d03f", "sighting--e4d746a5-1413-47d6-99f1-8cf0dbe845bc", "sighting--adcf92f2-69eb-4646-8d29-1a205e0b7847", "sighting--e5f6db84-024d-4294-ae12-5e993e319751", "sighting--69a03853-d8ae-4086-a272-3114fbb7c2a9", "sighting--e328d3a3-61a2-4091-afd1-23d53ad034c9", "sighting--88edab01-3c93-46b0-9998-82cd016f5841", "sighting--36375fbe-4eb6-4e7c-9cc0-f406d775c0d8", "sighting--cdf2fa1f-90cd-4f11-a05b-b50bd097237e", "sighting--5ab0ab13-c6ac-41ca-8dff-4b2156ac547b", "sighting--82f601de-37b5-40c7-97c9-ce691b41b82f", "sighting--d0610210-2099-4fc5-80fc-16c54606f10d", "sighting--0b1d2f17-074f-4b49-8a51-a55a6e4c64ee", "sighting--f02ddd24-5f24-4be1-9338-0f3b5dfa85eb", "sighting--b5e9ec83-4f39-46e7-84ef-bf7e9f8b2d62", "sighting--88ec0196-487b-4ee2-bb31-29434710942f", "sighting--8b9c1351-bd5a-4187-8280-be750b17a24e", "sighting--c04f7bf3-2037-41cf-b890-5922057940b5", "sighting--40357c21-3b20-4465-a3e6-3a5f9428f5b2", "sighting--740ffbfb-90cd-4198-8b56-99d181acb72a", "sighting--81979815-4687-414d-9cdc-6462fd6a15b6", "sighting--fb08b6b7-25b2-46f0-812a-bd5c2f665a85", "sighting--b17e8fd6-348a-4971-a06a-5f473e6eacf5", "sighting--90a27cfb-658b-409e-8094-7a8a8826b401", "sighting--dfd9804b-4d32-479f-bf88-6119a5a958f5", "sighting--40e53024-ab6d-4ade-8d48-818ade205fb0", "sighting--7dc03a93-065e-4847-b34d-f108d599bd4e", "sighting--f5498acd-c23b-459a-b1f6-bd6d4852f10f", "sighting--bec75eae-cef0-4cb0-81ab-c7b984ceff3d", "sighting--be794f66-e42a-43c3-866a-5e5a6f688056", "sighting--eeddf3ed-177e-414e-b045-f0626192445d", "sighting--f6197359-614f-4bab-87e0-19cb07353c9c", "sighting--ef0fa1f5-8cad-48b0-9502-cccf58c60d4d", "sighting--e1ab32cc-9966-4a0c-ba22-ce3b7b9a9a6d", "sighting--b69307ba-3c7f-458a-874a-87813615dd0f", "sighting--98743150-d24d-4454-9327-2aa66779238a", "sighting--240c6379-1b1e-412b-afd9-36a548d64756", "sighting--7f5ec840-448b-4205-b02c-6157c128d5af", "sighting--4599b9fe-b1a8-49ff-a714-203044bcf84b", "sighting--59df94ac-14f4-47fe-be3d-8d99dea407f7", "sighting--49afb4c1-3288-41e8-99e2-bfd726e9b7b4", "sighting--504d9746-55cc-4f3a-830b-e3a9933ebf35", "sighting--7585cd51-9a4a-4668-a98b-a262875b241a", "sighting--0ca4a0f6-e4ea-4f80-a474-75109c24c861", "sighting--503abe42-baa5-4217-8ead-7cac8f02c65a", "sighting--a34fdd59-3169-40a6-a002-346b07127b8a", "sighting--5a22f224-4730-4e99-ba06-21397b369813", "sighting--dffe7f1f-f176-4bac-a11e-27e1dac20fad", "sighting--fb716bb7-f9ab-4351-9a0a-f2b75053ec39", "sighting--6c2f6437-27f0-4cf8-94bb-2017f2dfce42", "sighting--3d510698-5fb5-455e-8282-04a2cdc3a55d", "sighting--be2b3644-25bb-47d3-a121-d744e0c63fcc", "sighting--9475f35f-022b-4703-81bc-28f0f50c4b9c", "sighting--5098cca3-3ca2-4651-9c91-5e763ff1fe84", "sighting--5abd4d0f-24cd-4c1b-9478-79fcc3db7505", "sighting--3128112d-190e-4932-92d8-2519b74524d7", "sighting--d1b069da-844d-4769-8ab6-8794d22a4bef", "sighting--15300ae9-7056-4ca1-9a70-576057e90a4c", "sighting--eee3d4b4-56e7-4fa0-8d3b-5cdcf57c20aa", "sighting--06fbc673-c2f6-4551-9c6f-ff25868e0238", "sighting--c69a1da3-cabe-4a80-80c6-e87836555f3b", "sighting--57aa45af-6d7d-427f-a1dd-52f6af6e1ca0", "sighting--8f083cdc-d062-4766-a5b5-a3dc9992f500", "sighting--b28fe03f-03a1-4a3e-ad77-d3b1977c8db9", "sighting--540bb234-32aa-4c50-9b64-967a76a0567e", "sighting--4a4eebfd-14ae-4345-8f25-1d80238fe75d", "sighting--7168e5eb-78c9-40ce-b61b-10d252d74610", "sighting--f971ec12-71fd-43e7-a096-2206abe35b3d", "sighting--7877d1f6-0246-4b9a-b04b-b203fbbe3f8d", "sighting--6f212cbe-2525-4b4a-87ad-fa63028b7088", "sighting--8624b951-172a-4d88-9b02-f3c857b306c4", "sighting--dbb3c32a-d85f-41cd-8157-e7121851c421", "sighting--37c31344-cfb4-4342-8926-4451268ace8d", "sighting--d3d05ae6-b56c-4774-844a-18d9c74b5602", "sighting--492017c3-5106-4479-a849-13d4d6777731", "sighting--d06c4bde-b69c-40b3-82d2-4e8256fb8b6b", "sighting--0f88befc-9222-4c1d-b569-fba31cd28273", "sighting--5955adab-fd31-44c8-afac-3b607cefc009", "sighting--52bafc34-8e33-4f91-83c4-48c228c5bd48", "sighting--bbc6ebdb-42d8-4fc0-830f-70573367b663", "sighting--fcc0b448-cf20-44e8-b35b-7b04fd2232ab", "sighting--3d00952d-5fe7-48bf-95e0-4736273421b6", "sighting--5062a4cb-3deb-4f1a-9c97-78e2807171a2", "sighting--c4a5f5e4-b3eb-47e9-9607-445ff0a7e0b9", "sighting--0da89232-26ac-47aa-a966-3a061c930fb1", "sighting--bb03bf1c-2027-46a1-a8c1-1599dbdb63da", "sighting--0e007a3b-3075-4325-bad2-c0fe2c5098d7", "sighting--e1e2bb6c-d25f-490a-883a-14be000e094d", "sighting--a53d3d33-f8ec-4c3c-9eda-9d35b40bf448", "sighting--f834f5e7-851c-4f98-836f-99c46ea5fba8", "sighting--3b3bbded-7b47-4fbf-bfde-62dc62a91e3b", "sighting--fc3f0f27-be2d-44a6-8f0e-d9d1363672f6", "sighting--579cb9ff-9e50-4dae-b2c4-2cca9aa4d25a", "sighting--77691095-d92d-4bfc-8cb1-1653d0534b79", "sighting--b9f825d0-d98a-4ab0-994b-19816178ff9e", "sighting--150ab5b2-9188-43cc-acf7-9f5bd526b338", "sighting--79068976-9af0-4a63-a619-7be62b47b267", "sighting--25b8c4b0-813d-4c04-b5f4-4a7cfe927c39", "sighting--570e0b19-c1db-40db-a56e-0288a7f19c6d", "sighting--afc58304-303e-4a24-abf1-ad836f1f5c19", "sighting--162f62b6-8d8e-42e0-9de4-01c1b726c07e", "sighting--d0bb8f50-8390-4cee-8fba-98a08b2b639b", "sighting--2a1880f7-4700-453f-acd8-2658d6f111ac", "sighting--898877df-5839-4a4c-902d-4666feee41d8", "sighting--44c3ea67-437b-4aa4-8d6e-25b94275e8b3", "sighting--480aa8b5-34e3-4fa4-8af7-71c733fed106", "sighting--9b78c4b6-065c-4a95-ae61-d54afc170eda", "sighting--4c9d3074-9063-4c89-97ee-9a7bd2ca3803", "sighting--1126b256-1212-4ae6-abba-2b7c2ec1fa62", "sighting--952d5d5d-42bb-43f9-9367-865d3cb74653", "sighting--157e0b4d-72b1-47ee-916f-6219a55d0c12", "sighting--49e0388e-2e40-4dd3-8578-c4bfc74aedd5", "sighting--9292b7e0-d287-498a-b481-f6ad8f819083", "sighting--50e2efb4-ec29-47db-a8f3-3bce9a60021d", "sighting--a6101bb3-f11f-4bb2-b401-87f3f77287f9", "sighting--516b5ab2-2efd-4548-99f0-f39e7e68370f", "sighting--bef9091b-1ae1-4bae-bace-51c4c016f2dc", "sighting--a49cae4b-4a49-43c4-96d5-fe8c4540200f", "sighting--7baf79ce-397b-400e-bc98-f087d72dc53c", "sighting--5e2597f7-9e83-4ea6-aa9a-02c5ff3de3f1", "sighting--3e74a18d-4de9-4aa5-8895-e3a5387b2e8f", "sighting--a63344f2-d027-4475-af95-1da146d33bc2", "sighting--d3b0e88c-7fda-438f-9178-33e279450ceb", "sighting--258a63a8-98dd-43e8-84ad-c1c3f3dc1048", "sighting--612d142c-873c-4a06-817b-6bb4eac32903", "sighting--16b749be-611b-4655-8b32-f7e5ee5e5729", "sighting--10dc6c39-3f57-4aed-972e-6987acb4396e", "sighting--786ea555-794d-4fe3-ba9d-effa7f31edae", "sighting--b2b0cc53-e24c-4e61-814f-43b6cda9c0f3", "sighting--9ce75d1d-05fe-45ac-83ac-9884fd6f5744", "sighting--3ea55f74-3ecb-4e78-b620-f44b291085df", "sighting--c3dae06e-ad6a-424a-8e4e-f5cfb0ab04f3", "sighting--669bdd52-ee04-44e0-a04a-a7b9e99858aa", "sighting--8b9a1d6b-46d7-40f4-a917-1083e2d7145c", "sighting--3d436f32-19fa-4a09-9329-fef87ed5dbe7", "sighting--60e5a598-1175-4ac8-be8e-21a9eab321ba", "sighting--33cce794-7478-44df-8088-553dfa1ee6fa", "sighting--1b997d41-ba80-483d-b8c4-0cf00b536b07", "sighting--8832a9a6-4bf5-4c63-a838-2b152bf3198d", "sighting--cd774bb7-4dc6-4ebc-8ab1-2cb7ee03ad82", "sighting--91b6333a-fad0-4cec-b136-e4f23dc5ed8c", "sighting--6fb1f6e5-2c90-4ec5-889f-f4af618485ab", "sighting--7bcb56ff-504b-4c51-b649-4ecef13d8eca", "sighting--081e8bc7-83c5-4d1e-b870-5556a19d872d", "sighting--7d29ae9d-13f7-474e-99ba-23bfc3fc838f", "sighting--05153382-413b-4e63-b8be-ea8978761ea9", "sighting--a02119f4-5811-404b-8033-9b67ee3310b0", "sighting--9e768907-af66-4cca-8a5c-48477e9207a3", "sighting--8e18a2fa-73df-4eb8-8d11-27f32af15946", "sighting--7d3f2e6f-8c96-44e6-9736-79270b170916", "sighting--b26e8ad9-1259-4a4d-be35-2e83f008368b", "sighting--79d21f06-67b9-4e38-9f53-b0045c8bec0f", "sighting--80772a59-b346-41a4-aeae-5bc0404eef77", "sighting--86f34143-50dd-491a-8410-d93480edf5e0", "sighting--fa8cdbbf-7d7d-46b1-ac29-82b6fdc7a608", "sighting--078fcb1f-eb3e-4dd1-af14-1a8c9fe36682", "sighting--3b26f1bb-e348-4bdc-bb50-eb4e4420baf9", "sighting--08a88971-ddeb-43ce-b151-5eddfdd2bad4", "sighting--5b24f361-0c95-44b2-85ae-fbd55f74fbf5", "sighting--0477da4c-99b8-45a1-9ae6-720f11276ee2", "sighting--65a4d127-599d-49d0-82eb-98f40ffbdba1", "sighting--2d1c3cbd-2845-4b15-8b52-b506ed7abd14", "sighting--49023cc9-28c0-41d0-b5a7-2ef56479ad06", "sighting--8adef3da-98ea-4d2a-90f6-88df5ceeafd6", "sighting--4011c6d1-73d8-41b6-b2e7-c25da4676cfe", "sighting--ed403719-66f0-4eb0-afe0-23b061516919", "sighting--eca3c087-4942-4ad6-a62e-6e1dbcf28e0e", "sighting--44bcd762-cdde-4eba-8f70-31b7c30d69bd", "sighting--e40d4eac-9a3a-46ea-9f61-ad458b68e807", "sighting--8510d23d-90f2-4008-96d2-a183b96b6f06", "sighting--b05c04be-83cd-48d7-b960-7b9dd5463437", "sighting--a94cf81c-b70b-4152-8a0b-ba32ee468035", "sighting--3101bfb6-e94d-434a-b15e-e558bab4a8de", "sighting--b9011fc4-7612-4aea-b0f8-194edc62bfbd", "sighting--6cb54a05-78d6-44ea-8eca-4a3a9a19f2c4", "sighting--e3062fac-3d4d-48c0-905c-0c1f8f949814", "sighting--147d6d06-80e7-490e-bc6e-30100c1c8dca", "sighting--3908bb2a-b091-4a52-ac58-936b65bf780b", "sighting--7184cf18-2a5f-4b40-a9b4-b44120ca568d", "sighting--0719c793-7cb2-4f97-8f89-e8b67a59f07e", "sighting--654fef80-b7ed-49cd-9f70-578451ccbac2", "sighting--b493ad1a-a62c-4dfb-b3d2-ea492806ca77", "sighting--811e6d50-b1e1-45c7-ab15-cc557087fce9", "sighting--26f03ae3-acf8-41b5-b407-42e3913a984f", "sighting--2e126d9a-355c-4913-9e91-b8f9b4b785af", "sighting--1a9dad87-89da-4ec7-8585-c775da385d6b", "sighting--29562dcb-a8ab-4d68-bcbe-a7a4c3acef37", "sighting--5cab4be4-c956-46bd-b3fc-8e32c06dae5c", "sighting--cb376d0a-c1a6-47b1-b901-6ced93f1d520", "sighting--18229fcb-188d-4afd-88ed-cad4c23e021e", "sighting--f9eee8bc-dc01-406d-a850-3b974e2085e9", "sighting--947611dd-a925-4941-a592-02497383ad62", "sighting--0550f5ad-ce81-4b7f-ac98-d3b593076b8c", "sighting--1ba458a4-09df-4432-b8f7-64145c5fdd5a", "sighting--87b641d3-e185-4155-a306-c252bfad5478", "sighting--2e3aad48-a505-477e-be98-ce2913642be5", "sighting--60350bdb-824e-41cb-a025-cd119b5d3563", "sighting--a7e23490-ec48-4d63-9394-f6edd4c07a73", "sighting--ea153945-a293-4edd-9884-0f34fd727e2b", "sighting--3e722443-ed6d-4f91-8f23-ee6080b4b4d2", "sighting--98db5435-0ed9-4c00-8341-7013457063a1", "sighting--4ed712af-5bdb-4d2c-b5b7-88792fa77412", "sighting--9f1ea56c-7029-4dab-82bb-2536ae7b6b7c", "sighting--379ada53-f635-4d94-a579-cad4d96fef1b", "sighting--2f68f1e3-7d6f-4c82-bf64-9c06ec091594", "sighting--59571a8c-4196-435b-942d-a21002aaac59", "sighting--3f05ee1a-1751-4544-b0a2-6adc6df43529", "sighting--c8fa92ec-6d8c-4acc-9fdd-7cd8cf99f4ed", "sighting--7568f95e-cb98-4707-94f2-be65fba555df", "sighting--3f3049b7-13af-4afc-8349-3cee6aaefa71", "sighting--c9ffc7df-7a46-461b-8767-ef1f1a884101", "sighting--a324a1e0-c494-468c-b1d6-d8411c5309d8", "sighting--87845816-2e69-4ec6-aee5-a4c693c9569f", "sighting--11f68159-60c1-495a-925e-cbadd54b76c1", "sighting--246e3f69-1ce6-4e01-95b5-a8bbff59d89d", "sighting--2e6c108a-123e-425a-82a1-0547d0b57706", "sighting--4ac3b413-1eca-4858-86c0-f0d007c131e0", "sighting--bf7999b5-1e38-466b-8f1e-4b08cfa57a75", "sighting--a837150e-a4a4-45a3-a370-2277f0d0e4c6", "sighting--f0afb10d-be20-4a9d-8366-42aa66163235", "sighting--2e3119d8-7ec8-4759-ac60-9ac1ff53e28e", "sighting--28c8f596-fdec-49ea-855c-3380763e4046", "sighting--b678393a-5797-47a1-a958-146f8b4e3640", "sighting--591a6897-f28f-4d47-822f-2a59b9338f6d", "sighting--6ff8662b-1dc9-41c8-bcb7-507f31ded650", "sighting--dc77c836-12e1-40f9-b0d8-b7882c113f69", "sighting--9e12fd17-d754-4437-861a-dbf27e37fed3", "sighting--ef1e9401-485e-42da-a589-760b5ca5d2d3", "sighting--4bf3faf7-67b6-4ea8-9447-2c8bd5f41a1c", "sighting--e5f730ca-538e-44af-8896-bf1178a82fbc", "sighting--c6759328-013a-4d64-9a33-7365bf6a1faa", "sighting--b4a2e5ea-2b5d-4164-968d-0ac48f817cb8", "sighting--6b50d5e9-5924-4186-98ac-2da87cb7ebfe", "sighting--b72647d9-c9fa-47b6-9528-a1f2f455996a", "sighting--92549c73-9773-44a3-a4c7-4bcdec046d35", "sighting--6092abca-1330-4635-ac7d-43db938e34c5", "sighting--e4cb926f-f862-47bf-8c86-6c3f998b262b", "sighting--d29920fd-73c6-4ee1-a96f-f59d088a862d", "sighting--0ef77910-7bfb-4d12-8abe-48e817bf5f2e", "sighting--c081314b-592a-42ba-9b5e-41c980fff5bb", "sighting--55e39673-65dc-4589-8724-d957968708e4", "sighting--1ea9e32b-aed8-4210-a9a7-9204b482fcac", "sighting--e8f12197-9a4f-40dd-9d06-f7be28b62b30", "sighting--4e934320-718c-4839-bef5-47f415fbfae6", "sighting--12d1d14a-3ec3-4cae-bbd3-220293f8f9e6", "sighting--23cd8b90-6de9-4953-a8d5-485103e89d73", "sighting--8ef892dc-295d-4242-a731-127986de3459", "sighting--6f0f78cc-6ff1-4389-8c14-c073cc2afbdb", "sighting--b4325fe7-542a-4b8b-98b5-6f0239c198e9", "sighting--34fe4d37-cb58-476b-913d-515fe9e95d2a", "sighting--dc0f5983-b89d-4e2d-9ea0-7d228f646cd3", "sighting--a49abfb2-f416-4070-9793-63adfe02126e", "sighting--7b65c98b-c0a8-4b32-ae4e-bc6caa14b3f5", "sighting--2acc0e06-33c4-484e-8486-fc9d5e7f662f", "sighting--d12bfcf3-659d-4104-b81e-15702c4a9ae3", "sighting--fdedd3be-14e3-4f80-80d7-1e0a35aeee24", "sighting--0c87a629-ad1f-4e4d-9db7-06ea227ee786", "sighting--68d2b2cb-b3ac-49d0-b7cf-508320651816", "sighting--94c2b891-36dd-4c9f-8c50-cf00612fd4bb", "sighting--40ca0441-8fa8-4fdc-bb51-879bb661ff4d", "sighting--1c26ebb1-db13-4e1b-83aa-7d7853cad11d", "sighting--5f5b41ae-d8ec-433c-b493-94de7b1e0626", "sighting--e7ac1e3d-5cfb-494d-80d2-e5e310f1a13d", "sighting--f1d630cc-a5ff-4e70-83aa-486cc6fab57a", "sighting--73efce0a-3540-4773-b0a7-e10300b938fb", "sighting--f60d0b61-9ded-4d7b-9f06-75d2cd296095", "sighting--92cfc83a-e1ae-446a-90d2-5b0fbe9f0fd8", "sighting--856d2828-3bc2-4ac1-ba19-37c8c0f9fff4", "sighting--fccd6b1f-4336-42ca-a418-432e8396aef7", "sighting--56cd932f-5eee-48bd-a70d-7c90780bdba8", "sighting--f3f6d303-a840-41cf-9cec-5353e3a7b90b", "sighting--ee74a0d4-6ddf-4698-934a-1dc6107879b1", "sighting--17da007e-2eca-4318-bf18-c0a9dfb27960", "sighting--e2a1e09a-8e67-4ec8-8e58-639dc1700630", "sighting--d42baecc-e077-4f4e-b25c-8b61f6ad005a", "sighting--43f9cb98-046b-4054-bed2-bed24f117be1", "sighting--c80e462d-4df4-402e-9d48-b216bd4b0c74", "sighting--92c99d13-d457-4164-9c78-fa152b595020", "sighting--49330006-00b2-40c8-961c-bbc882e8a863", "sighting--9ede9d7d-2618-47ac-b119-8381634485e2", "sighting--691dac19-c45b-4203-b15f-fda62fe26ddf", "sighting--900c68e1-d2b0-44be-b800-548e03c9a9e2", "sighting--511154be-b0fd-46ba-810c-a817da802020", "sighting--36e38355-24a3-4412-bbad-06d82deaef36", "sighting--1c1a6d16-dc65-47d1-922e-0ba0beb3b0e6", "sighting--05050be7-606e-4cc3-a02f-9826be767a5d", "sighting--580abb63-20c6-48af-beba-34f6fe803095", "sighting--2ed12031-45c4-4ad8-a9c2-4ce520dcadbd", "sighting--2725cad5-2c93-4918-ad5f-f749428a593a", "sighting--0051fee4-08b4-404e-8082-e95262819f05", "sighting--3640d374-23e4-4b5b-93df-97176f9fd9b9", "sighting--48d4a188-e78f-4f41-8a05-4068918a34d4", "sighting--434bed11-2378-4d4e-ba68-85694f8f7700", "sighting--0fad9658-7c2b-43bf-bfcb-80f1ac84caea", "sighting--8c0634b9-162a-4eae-ae4d-21fafbe82966", "sighting--47e03a3e-c087-4c18-addb-af3d371fe15b", "sighting--d4062150-2585-4dd1-b270-749a6c8e3e69", "sighting--92d2772d-d7ef-4c8c-bf6c-87f9c0452d24", "sighting--11b6f6cf-5e7d-4fe7-b540-5dd0920c66da", "sighting--1ac39885-0f4d-4f50-9e86-c55d9cc8023c", "sighting--cec53551-8e3c-4558-b3bf-fd3b11e5353d", "sighting--8ed0e54e-86f9-4079-9284-80950e8070ef", "sighting--a22b8280-5cb5-4994-9cf0-80547bdc08c2", "sighting--9c16f31d-61d5-48cd-92f7-459697ebdc4a", "sighting--8f16b92b-a8ae-40b1-a02b-4023351d6b0d", "sighting--48e07167-d56e-4335-8ffc-8f2a1e96d933", "sighting--7282612e-359a-4923-929b-c71e38f1f222", "sighting--c3b4dc5b-aa73-48ce-be7f-865b6d6538a3", "sighting--e6d93e8a-e7d2-4b6c-b9af-d83f50b7e032", "sighting--cea2c68b-888e-4c53-992e-c5bbeb8c260c", "sighting--02c1a839-8d1a-4882-9550-ff2021fe68f9", "sighting--97995365-027e-4626-896f-45c6ac833457", "sighting--f5d4f9ac-eb81-45a0-a126-01d5326d66ce", "sighting--78695404-9acd-4e82-a37f-d79f466178c2", "sighting--20ee6f40-38b9-4c66-9843-e99e0993498f", "sighting--d7d2143d-be04-4e31-a550-e65b2c11fa64", "sighting--84f50b3a-d84d-4afb-845b-e0e7a573c5c7", "sighting--99464d78-97be-4a48-9e18-3de72ce976e9", "sighting--da7fca1e-26cd-4785-8df4-edb15dfdbf6f", "sighting--a63c52e3-ef69-497e-af2a-61f3b16dbc74", "sighting--340023d3-b55d-48ba-819f-4a2b37c54c7e", "sighting--b3b8fcc2-1cad-40f2-985d-7b37701e07de", "sighting--822bcffc-9370-469a-9f16-5f5068f5b741", "sighting--f12bb7e7-c682-47d5-969a-27de3aa7b163", "sighting--4e30b858-21b6-45cf-9fe9-9fe292b57af2", "sighting--35f50323-3c9d-4583-bd6c-d28db669b994", "sighting--51c2913a-c7f1-4edb-97ca-c9a772f97f8b", "sighting--45e545f1-9221-4a39-9527-49b1a5af2a73", "sighting--19519073-ef20-457c-a6f4-87756691182c", "sighting--392e017b-a9c7-4fc7-b72e-a54cce07f820", "sighting--a5794e3f-f069-4fc5-b99a-55f2cb6f51b7", "sighting--345a5245-6255-474a-bfb6-596949219a12", "sighting--45e26c5e-30bd-4c66-b2e8-ec0e2c7b35e0", "sighting--8aa05f89-9437-4b4c-a80e-e90cfb7d8986", "sighting--605f89c4-7542-488e-bd45-87cded044dad", "sighting--34c22a69-a70c-424a-957b-43ef87612824", "sighting--a943b00b-c3b1-49ab-b10c-e5d050a55801", "sighting--a3774684-8642-4dcc-83f2-3e53549ea95e", "sighting--b4063b35-8fba-4380-a91f-a1d6d8444051", "sighting--1625400f-ed07-4305-952c-9ef5ad8b2807", "sighting--94c7c0ec-1330-4508-80ed-c79f673fc76e", "sighting--b22504e3-cb43-45b9-865f-1a38b751f67b", "sighting--672db57e-56ef-44a2-8d07-ab02ddade807", "sighting--da5050c8-abef-4bc2-9d7a-9b17d1d3a4ba", "sighting--6d1e6e50-7e53-4bfa-9646-2e839c367b99", "sighting--4d7aa797-76aa-4551-9345-88ae962e20c9", "sighting--637e51a6-aef0-4647-a615-432020b78924", "sighting--526227bc-08fc-46d4-88f8-3ec9a0f6fd9b", "sighting--23a1e9f6-932f-4847-a467-53c49998fd55", "sighting--ce649b4c-20a7-44c0-8336-704a99e5e996", "sighting--93a34942-9e6f-47fc-bf5f-9cdbc6465acc", "sighting--4580aba6-37aa-4427-b064-bd4754e191a7", "sighting--4d40630a-5928-46c2-bb9a-37547207f571", "sighting--a99b0eec-3b90-4fe1-842e-3c0788bc21cd", "sighting--7e81aa86-cd42-4c10-bb7f-1006077367b9", "sighting--1761e3b9-201e-413f-a910-4747d9c2f1fe", "sighting--18bbb1a1-5671-4fb8-9c02-af4b65c2e754", "sighting--56312c90-4059-4b0f-abdb-64f6a4e7cdf8", "sighting--1257fdca-e348-4a29-bf11-d3d74c57f016", "sighting--defb97f7-0371-4381-9db6-35d6cb875811", "sighting--d855ee6c-39cd-4ca9-a666-37a11cc55e06", "sighting--e47e7aa6-7a07-40fa-b295-d55b79cb4a86", "sighting--3e00f4c2-c281-4b85-8fae-c29760e603aa", "sighting--317aa2f4-256a-4153-a462-5fbd47e5d662", "sighting--3beb7ba8-09b4-4c6f-8167-94f4e7a93d2d", "sighting--263e4ab9-53c0-4df1-91e3-20b745434add", "sighting--b5123ead-0e15-4bc3-b052-71f27df9580a", "sighting--f37bf35c-f318-4bb6-a842-1597ccf68b97", "sighting--73da680d-254a-472f-8249-2f3b934636e0", "sighting--829cfe4a-d7b2-46e4-a07b-c56eb9160e04", "sighting--94f68a79-3b6b-4f35-851d-ead34276bf59", "sighting--20c165f1-7051-4574-86fb-a325a140cf39", "sighting--0e42e059-0e49-4c15-810a-99304637e0e9", "sighting--5f31b824-6420-4c65-9ca0-040909b4fad4", "sighting--6e30fdca-1a4c-4ebd-b8d1-1bfd773c9cfd", "sighting--4ac7351a-59bf-4ecb-9bd4-f5456a63a5b7", "sighting--96f9964a-5e51-45be-8275-bfdc1ab2573e", "sighting--5977eb7b-a844-4e93-b145-5752b401808f", "sighting--0600788b-88e0-45b2-9b4d-681c928ab408", "sighting--fc287539-4274-4d95-b4dd-3f36b13445a7", "sighting--6eefc1a6-730c-4e3f-a32b-768a1df1b268", "sighting--f6b9c008-f85f-4bdf-ae2b-2d8b0bbef618", "sighting--492ace89-bd76-485d-90ab-a374e9776783", "sighting--a038b8af-5c7c-4992-be52-100cefd0ab32", "sighting--1d8ab05e-a293-4508-ab2f-399f926b0fa6", "sighting--72cd1617-1402-4a0a-86bb-05f6bb364d27", "sighting--c48c768a-9d50-4d7c-9460-b47da4183b03", "sighting--8d3a912c-876f-481b-9cb7-93fed9807cf4", "sighting--145167ee-a8af-4b37-a3d3-9bdc353d8279", "sighting--1fbe3d57-f12e-4d12-85a2-21a0c08f1f20", "sighting--c1724df5-995f-4e1c-9a7d-7d9070894eec", "sighting--1594c319-2ff9-4d51-a67a-9e2186e7ec01", "sighting--6458cd6e-327a-4e09-bd10-6c54608a6e31", "sighting--0556612a-d04c-49cd-81e2-51602ff9d263", "sighting--117dbbc7-f387-4f9e-9495-94c9725f0660", "sighting--ab9be315-c261-4065-96b4-8d18cebed309", "sighting--a44c1d11-017b-49ee-96cf-6f224e77fe05", "sighting--9a7b8c2c-d8c7-4e78-b0b8-1c29f6db2ede", "sighting--72466087-a3e6-41c1-9ea1-25863cae308b", "sighting--8c7d1ffd-8b53-469c-aa6a-04d7f61caea4", "sighting--016b7272-53f7-400c-92f9-68a8ee2a54ff", "sighting--9d84bbc8-17c9-4249-9daa-a1ca1550c2af", "sighting--2a9fc6e8-f146-4710-a0dd-118d63a4d333", "sighting--f14854c2-8f62-437c-9ef0-7e986b48114d", "sighting--21efbcf9-97c8-443d-b6af-a248dde996ee", "sighting--7df86b5a-26f2-48b5-b014-c6f6c453327d", "sighting--b55fed3d-83ce-44af-b431-06e7749d03f0", "sighting--2841ee79-80de-4ea2-a626-46bfa08852aa", "sighting--93c1ef1f-b7bc-47bc-8b5e-045e6e8cefd4", "sighting--3e6913d7-921a-48e5-96a0-c1562a868041", "sighting--9fb1f8be-fe55-4a80-bd22-8ec0f81d902b", "sighting--270238d3-3614-401d-9104-e1c09ea4a91f", "sighting--9bf4f53d-aa19-4414-882a-5f1534a023e2", "sighting--2eb921f3-2be1-4c29-8681-1356ebb71faa", "sighting--7f19b0e5-16a5-4a5e-8ef7-b016e2c59b7e", "sighting--957479da-6b2d-416d-ab08-f6dad6596b45", "sighting--ff189560-fc2e-4102-9eec-8a9b6d445b0a", "sighting--32b22cc1-ae5a-445b-b10e-ab09d9a7c6bf", "sighting--d556f0c8-33a1-4a9a-9e64-73f4d7a40d39", "sighting--c622663f-e6dd-42c8-b66e-eadea79f7c6e", "sighting--db162155-145c-421b-b13f-32b3e66f5e1d", "sighting--fb60d3b1-7e85-4b4e-8a3c-efcad2eadb8f", "sighting--2311fda6-38b7-450b-83ac-86a7ca9ef021", "sighting--8c0b3e4c-d80a-4202-a9aa-8f1354c9c513", "sighting--548d9972-eb16-4ef6-8f3b-88198ed3f59f", "sighting--e195e4b4-7965-401d-8c84-0b85a3db10ed", "sighting--327b6a61-e2b0-42e1-9680-a703d493c6c1", "sighting--5b125e37-ee7b-4947-86dc-4755fe9d6a34", "sighting--52c15b97-eae9-426f-bf8c-671814612070", "sighting--4c193b54-3192-4037-8ddf-40a3cea5d762", "sighting--c619a0dc-9a5a-440f-ab2f-be605b0cc67a", "sighting--43756140-c574-4b93-b603-371e3fc8408b", "sighting--90e03706-2f75-4202-bdbf-4fe542ee3865", "sighting--44f16ee1-0c0b-4aa6-be81-dcaaa71fda51", "sighting--055d92ee-dccd-4903-9a20-66617925c789", "sighting--cf07a993-a563-49a3-86f8-a9cc01944500", "sighting--b5f3488e-585a-4e10-a1bb-a4fa352a2fdb", "sighting--04ba05dc-d962-4455-9b20-284726d25697", "sighting--92b822d3-a2aa-45b4-ba11-9fcf1deadeba", "sighting--646612c4-e7cf-43b9-bad5-59c90f7a44b0", "sighting--b0d08f04-3424-4070-9ee6-92798c8ff5aa", "sighting--339950e8-6a1a-42d8-8097-028807b414a9", "sighting--899fa2eb-fab1-4044-a7c6-6a10f9a32cbc", "sighting--09ba0f10-8b45-4d5b-ab3f-26c47f7e47e5", "sighting--79d81f59-4085-49d4-9ad5-3d090af68f9a", "sighting--12ed177a-69f5-4a93-8808-b0ce928fd6b2", "sighting--d4d7a6cc-4a91-4b9d-be86-32812dfb548a", "sighting--a1e23def-cb68-42df-a042-60cad2459647", "sighting--72db3649-8d54-42e3-81ad-0154a136da9e", "sighting--35038946-78ed-424d-b064-97d2aa0cdf44", "sighting--1ab34b89-15e8-4f84-b4fd-2eee08edc183", "sighting--a3265735-8283-4cf3-a09a-5aa832c34ee6", "sighting--e884188e-6d04-474d-921b-a139380313d6", "sighting--76edf5b0-199e-4c0c-8f17-47e383632527", "sighting--04aaa43e-8e35-4b63-b4f9-9f69d9475ce5", "sighting--1cb19ba1-f207-40ee-b6c2-72f9ac30e17b", "sighting--4d366ff8-e498-4208-9b77-6c6f38aa206f", "sighting--8c99d9a7-795c-4374-8d93-2ff2bdce7848", "sighting--ea810695-3782-4c63-a857-a51719f7523a", "sighting--b499f87e-548e-4bc0-8463-4940b2c13c49", "sighting--a96f33c5-01fd-4f74-9f95-4c4ab01d6594", "sighting--50d25099-8a1d-4ea1-a11e-aae088b6ca1e", "sighting--d0a11007-9ce2-489e-bd32-908dffec4cb0", "sighting--7d24b793-acb4-4f43-b90b-37838566bcce", "sighting--77bd5b3a-a13f-415a-8389-0e371985aa9e", "sighting--53cd8802-7dff-4ea3-af27-b7b0ab2f3ac7", "sighting--82717fcd-245d-4fa6-93ed-4628c541650f", "sighting--40ecca36-484f-4e4e-8fe3-97932cd0c68c"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-05-30T11:00:02.024Z", "modified": "2026-05-30T11:00:02.024Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}